[sssd PR#5241][comment] GPO: respect ad_gpo_implicit_deny when evaluation rules

[sumit-bose]

URL: https://github.com/SSSD/sssd/pull/5241
Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules

sumit-bose commented:
"""
> I can't reproduce this. I have two users 1) Administrator, 2) vagrant. I allow access to the Administrator. Administrator is allowed to login as expected, vagrant is not able to login either way regardless on the option settings because an applicable gpo is found and the user is not explicitly allowed.

Hi,

the issue happens when there is no allow rule, i.e. RemoteInteractiveLogonRight is empty.

bye,
Sumit

"""

See the full comment at https://github.com/SSSD/sssd/pull/5241#issuecomment-678307489