Remote Desktop with AD users, OD groups

I’m trying to set up ARD 2.1. I’ve got a large AD environment that already contains user accounts, but I have no control over getting the ARD groups set up in AD. I’ve got a local departmental OD server set up now, and am hoping to use it for the ARD groups, among other things.

The Open Directory groups for ard_admin, ard_manage, ard_interact, and ard_reports are all set up, and my Active Directory account is a member of each.

I’ve bound a test computer to the Active Directory and to the local Open Directory. I’ve got the ARD admin application on my laptop, which is bound to Active Directory but not Open Directory (yet, now that I think of it, I’ll have to try adding it). In Directory Access for both “Authentication” and “Contacts,” Active Directory is listed before Open Directory.

I initially tried to set up the ARD 2.1 client manually on the client workstation. The lack of any settings for directory services groups at that end, in System Preferences > Sharing, was conspicuous. However, because that didn’t work, I created a customer installer, which did have the option to enable directory services groups — which I did.

I installed that on the test client and still could not authenticate to it with the ARD admin application.

Any ideas?