Just a quick question.

So this does happen live as if the user turned it on or off via the properties and not via next logon.