I have a Sharepoint 2007 installation and several Active Directory Domains. Now, since I can't have a user from Domain A be in a Security Group in Domain B, I need to create groups within Sharepoint to include the neccessary users.
I could possibly just put the AD Security Groups in the Sharepoint groups, but we had problems with that approach when mixing it with audiencing, which is why I want to have the Sharepoint Groups contain individual user instead of AD Security groups.
But something "feels" wrong about this. Some groups contain a thousand users or more, and I feel like I would be unneccessary complicate things and add another maintenance burden.
How is this done in other companies? How do your manage your Sharepoint Groups in a Multi-Domain Environment?