Can AD groups be restricted using Restrictive Groups?

[mnollar]

I have a highly sensitive group that has access to confidential
network shares and I want to make sure that the group membership stays
the way it is. I have used Restrictive Groups to restrict access to
local groups, but I need to restrict an AD group. Is this possible?
I can setup the GPO, but there is nothing to link it to since the
group is in AD and not on a specific PC. Help would be greatly
appreciated.

Thanks,
Mike

 

[Joe Richards [MVP]]

You should be able to set it in the domain controller policy.

joe