Hi Sam,
You will need to setup the 'Directory Service Query Tool' connector within LEM in order to integrate with AD. See here for steps to follow.
You can then use the 'Directory Service Groups' window within the rule to add domain users (or individual groups) to your rule.The second line of the rule refers to the Service Accounts. This is an out of the box group within LEM, but can be customised to add/remove accounts under Build - Groups in LEM.
Users included in the 'Service Accounts' group:
