A quick way to get the values is to create a security group in Active Directory and add all your members.
Create an AD group key on the SEMS server and browse to the security group and check the box and follow the prompts.
This will automaticlly create the group under Consumers, Groups and all you have to do is add your policy.
The group name will be the name you made for the security group.
If you wanted to add people later to this group just add them to the security group in Active Directory and PGP will pick them up. The user would also have to be enrolled with the server.
Group keys are used for FileShare encryption (Netshare), this is a quick way to get values if you don't want to use an Ldap browser and you don't have to use File share encryption.
Thanks
Anthony