Is it possible to authorise JAAS sessions based on membership of NT Groups?
It looks like it is user level only. http://download.oracle.com/javase/6/docs/technotes/guides/security/jaas/JAASRefGuide.html
(ie administration is via a policy file - not possible to change authorisation based on NT Group.)