can you explain value 9 for switch DFCON? If I'm not mistaken only values from 1 to 4 are possible.
Evaluate org. unit/reject authorization per default: 1
Evaluate org. unit/allow authorization per default: 3
Never evaluate org. unit/reject authorization per default: 2
Never evaluate org. unit/allow authorization per default: 4