Problem:
Is there a way to configure policies that apply to groups that starts with a specific CN.
Solution: