How to target an ActiveDirectory group in "Applied To" within Altiris?

Hi guys, This should be real easy, but I do not see how to do it. How can I apply Altiris 7.1 policies against groups in Active Directory? I have 3 options of how to target stuff in altiris(computer list, filter, and group). Computer list only seems like a good option for single objects(or have several of them for 10 objects), Groups only shows OUs in Active Directory, so I am guessing it would be filters. Does anyone know how to create a filter against a security group?

Thanks,

Dan