Dan's Guardian groups ...
Hi, we run Dan's Guardian (DG) for filtering at our organization. We use the Webmin graphical interface to administer the DG features. From the DG bash script on our site, you can ...
" ... retrieve a list of users from a NT Domain controller, and based on group membership of the username, assign the username to a certain Dansguardian filtergroup. NOTE: You MUST modify several elements of this script to match your particular configuration. Also, this script depends upon SAMBA 3.02 being installed and joined to a working NT domain. While this script does not give Dansguardian the ability to select content filtering based on group membership, it does permit the assignment of users to filtergroups based on group membership thus saving the system administrator many keystrokes, especially on larger systems."
Our workstations run a SmoothWall mini-app that connects their login name with the DG user list. If someone's user name belongs to Group1, they automatically get different access than someone who belongs to Group2. If the details of this setup would help you, let me know and I can do some digging to see how the architects set up the system (I'm just the administrator).