HP,Altiris Group

I want to do a phased rollout of the Altiris Agent rather than a big bang, but I can't find an easy way to achieve this. I am trying to setup a filter which automatically includes all computers in OU X or group Y. Is HP Client manager aware of AD at all, beyond picking computers out of it?

Quitch,
A bit late with this, but it seems this is a known issue with SMP7 and the AD Import.  I can hardly imagine how this went unreported and unresolved for this long, but it is reported as corrected as part of SMP 7.0 SP4: AKB 50719 under the Filters and Resource Targets issues section.

I haven't messed with NS7 too much yet, but the OUs for machines imported from AD should absolutely be available.  For groups, you would need to add a specific AD Import method for the groups you're interested in (AD groups aren't imported by default).