HOWTO: Setup Dynamic Access based on Active Directory Groups

Everything is based on group membership and not OUs.