AD group nesting in OD groups failing

Question

So here is my setup. Lab with 10.5.4 clients. Xserve running 10.5.4. All users in AD. Xserve and clients bound to OD and AD. On clients AD is first in auth order. AD auth works fine.
What works: I can control access to OD computer groups via login | access peferences for that user group and adding an AD group to that listing. That works fine, but isn't what I need since it doesn't allow me to manager user group preferences, only computer group preferences. In my case I need to have three different levels of user groups each with varying levels of managed preferences.
So on to what doesn't work. I am able to add the AD user group to an OD user group via the WGM, but if I add that OD user group to the OD computer group via the same login | access under the preferences for that computer group login fails on the client. Boo-hiss.
Is there an incantation I am forgetting here?
Cheers,
Sean

Answer 1

if you look at the user in workgroup manager, shouldnt you be able to see which group (AD and OD) they're in when you click on the "groups" tab? thats how i can look them up.