Restricting to n Active Directory users?

I want to deploy Spark to a particular subset of users and am looking for a way to limit which users in Active Directory can login. This subset crosses OUs, so I can’t simply change the base DN.

Is there any way I can accomplish this goal?

Ah, appears to be answered by http://www.igniterealtime.org/community/message/107813#107813