How do I control who can log in from Active Directory?

I currently use Centrify for Active Directory control and am looking to use the built in access in SLES. I have successfully joined the domain and can log in with my Windows network account. How can I restrict who can log in from the Windows side?

In CentrifyDC I can control remote access to the server and sudo rights via AD groups.