Limiting users and groups in Auto Zone
If you want to use Auto Zone, but do not want to give all Active Directory users and groups a valid profile, you can use group policies or configuration settings to limit the generation of profiles and computer access to specific users and groups. For example, if you have a two Active Directory groups with users who need access to Linux, UNIX, or Mac OS X computers, you can use either group policies or configuration settings to specify that only the two groups who require profiles are valid Auto Zone users and all other Active Directory users should be ignored.