AD integration and user access (GPO)

I'm hoping I might be able to get a little knowledge regarding a request. Can anyone help shed some light around integrating MacOS (High Sierra) into a Windows Active Directory environment?

I'm familiar with MacOS's native AD integration however haven't practically seen this in action. Is it possible to lock down AD users to certain applications or enforce policies to the OS? I am hoping to integrate with our windows GPO's or at the least maintain a central point of management for all MacOS machines. An ideal situation is if its possible for MacOS to talk to System Centre Configuration Manager (SCCM).

Any help regarding how best to go about this will be gratefully received. Many thanks,

Tom