MS Log-in Allowed Groups data location

When setting up a new profile in the VNC deployment Wizard there is a selection box for MS Authentication. Here you can enter the allowed user names or groups. Where is this information stored on the remote computer? I want to change the allowed group without repushing VNC or changing the VNC password.