Enable SSH access for AD admin accounts
Within System Preferences -> Sharing, the Remote Login option should have a spot for "Only these users".

If you've properly joined the machine to the domain (good luck), you should be able to select the group from the "+" sign.