Thank you for helping me in advance. Last night I created a rule to Deny the Username %carpintey%, because we have a spammer that creates dozens of accounts with the prefix carpintey.
Today I checked our users, and one named carpinteyroeal had been created, regardless of the access rule. Discouraged, I tested the rule with this exact username, and the rules stated that this username was not allowed. This confused me, because someone had indeed created this account.
I did change the rule to carpintey%, taking off the initial %, and still on a test it said this username was not allowed.
Can anyone tell me what I did wrong?