The above link is an excellent guide. It's reasonably straightforward but don't bother with augmented user records for adding per user Mac policies. They don't work reliably. Policies for users can however be set on a per group level and these work just fine.