access policy to check for AD group membership based on URI

Hi.  Trying to check for AD group membership to allow access to URL based on a string in the URI.   In the Look for Login box, I'm using the branch rule expr {[mcget {session.server.landinguri...