HOWTO: Setup Dynamic Access based on Active Directory Groups

[speedy]

Everything is based on group membership and not OUs.