traffic shaping along active directory

Hello everyone,

Just a quick question for everyone on the list here.  We have different users in different departments and I need a way of doing traffic shaping certain people access to the internet.  My requirements are

1.       Change priority based on groups in Active Directory.  I may want the general artist have very slow internet access compared to a producer who is downloading DPX plates etc.  I believe that you can do with with some of CyberRoams products (haven’t looked there products to closely), but thought I would see what else people have heard of.

2.       I currently have things organized into several vlans and I could set up rules based on IP address, however it would be easier management to do this via groups that we already have in AD (producers, artists etc).  There is the chance that people may have to change Vlans at some point etc etc.

We have a pretty decent connection to the net, but after several people get on vimeo, youtube, Spotify at once the connect definitely does take a hit.  I basically need to guarantee Quality of Service for a certain group of people over another.  If the primary group isn’t using that bandwidth then the secondary group can use it for whatever.  It would be nice not to have to kill access to the internet completely.. but just need to better control it.

If anyone can suggest anything I would definitely be interested!

Thank you

Jeremy