I'm wondering if anyone has had success with this type of scenario:

We have 12 Active Directory domains in our forest. We host FMPro 9 Server from a Mac which is joined to Domain #1. What we want is a Universal group in AD in Domain #1 that contains Global groups from Domains #2 and 3. The idea being that we manage the privilege set for database access from Domain #1, but the admins in Domains 2 & 3 manage WHO has access.

Essentially this works out to two global groups nested inside of a universal group. Will logins work if FMPro is set to look for the nested group name or must my groups be unnested?

In theory this should work, since support for Groups within Groups was added for FileMaker Server 8. However, the biggest problem may well be the introduction of the Macintosh element into the equation. Evey time Apple revs the OS, they manage to break something with the AD plug-in.

An alternative might be an Organizational Unit that has all the groups. Let us know how this works out.

Steven