Support SEPM sync with AD Security Groups

(re-posting previously requested item)

We wish to see the SEPM support sync with AD Security Groups. This would allow us to assign policies based on the logged in Windows users membership of security groups, rather than just the OU they reside in. This is important especially for dynamic device control policy assignment. Also, AD Security Group sync can be useful for SEPM console login.