I did the above test.
for users of the ReadWrite group the permission is denied.
The group with write permission can only read.
Group with Read permission, works fine.
I use 2 groups of users in Active Directory.
GroupReadUsers
GroupReadWriteUsers
That way the read group is not working, just write.
Permission for users in "read group" does not work.
I have the same problem in KSC 11. How can I allow one AD group to read and another to read and write?
Link: https://forum.kaspersky.com/index.php?/topic/384391-device-control-users/page/2/
Example: User ABC group Read
User XPTO group Write