We use LDAP to populate the department and building fields for JAMF, we
then scope policies based on those departments or buildings. We run in
an education environment so we also utilise the telephone field from AD
with year level or staff tags, then...