Limit login to specific AD groups

[ssurma]

I was trying to find a way to limit which AD groups can login to a MacBook. It looks like I would need a policy. Any ideas or suggestions.

[sshort]

You can use a configuration profile with the Login Window payload to allow or deny access based on AD groups.