LDAP groups in Active Directory/E-diectory to decide on access permission for RDP sessions

Hi there,

I want to assign groups inside PAM for users goups. So that only members of that can only receive permission to access RDP. 

But i dont know what regular expression I have to write there.

I did got this link but i couldnt make out make out the DN. Can anybody can write it down for me.

For both AD and eDirectory 

community.microfocus.com/.../1773821 Control Rule for LDAP Group Matching in Active Directory