accessControlEntry

An access control entry allows or denies an Active Directory group from enrolling and/or autoenrolling with a template.