I just created a local group in the local domain (ie where the admin user sits, etc) and then clicked the + button, waiting for about 2 mins while the incredibly slow and uncached list of AD users appeared after choosing the AD search path from the popup menu in the drawer, found the users I wanted and dragged them over.
In recent news, I restarted the server for the 10.3.1 update. Now, it seems that the local group access rights are being correctly given to the AD users…but I’ve only tested with my account. I’ve added other users and asked them to verify their access, but it’s 1.45am here so I won’t know for a little while 🙂
Cheers,
mike