ok, If they have a user name and password for vpn1 they can get loged
on and use the resources in the subnet belonging to that and there connection profile seems to work fine.
If they use the connection VPN2 but are not in the connection profile for that VPN2 they can still use the same username and password for profile VPN1 they have no acces to the resources but they can get the connection no problem?
What it seems to do is give the ip from the connection pool for the username that logs on so they are on the wrong subnet when they connect to a vpn that have np profile on.. I amnot sure but if they went in to their networking and manualy changed their ip to the one on the vlan they dont have a profile on I think that would be able to get at the resources.
