This message was deleted.

MAybe you can use the NPS to do the group check using a NPS Network Policy?