I believe this topic came up up in the past, but noticed there is a now a 3rd party that delivers Mac GPOs, see http://www.centrify.com/directcontrol/mac_os_x.asp#grouppolicy for details. It also provides authentication of a Mac client into AD via Kerberos and LDAP. Thanks.