Is there a way to force pam to look at the group policy for log in restriction (local and remote login) on a windows 2008 AD?

I am looking at some easy way to manage login restriction on unix (rhel5.2/5.5) without having to manage every box individually.

did anyone done that?