Hello, Yes it's possible. You can configure XCC Control to periodically poll the LDAP server for changes in the memberOf attribute. If a user is detected as being moved to the "blocked" group, XCC Control can then send a CoA (Change of Authorization)...
