I'm sure you've figured it out by now but for anyone else who ends up here:
Domain URL: fully qualified domain name of a Domain controller. DCSERVER.domain.com
Authentication Type:Secure
User Groups: Display name of a security group(s)
This only allows users that log in with their AD account to be "Standard Users" so you will still want to set up a few admin accounts manually.