I am going through the same pain. I am sure in 7.0 when we tested it we could add the group and any users of that domain group would authenticate. I can set up each domain user I need to have access but that does not seem right.
Our 7.0 test box went a long time ago after no success so I cannot refer to that one.