We only have 1-way trust. The SQL Server domain trusts the outside domain.

AD admin says groups from outside domain could not be members of local groups.

We have a working solution now, so it's moot.

Thanks for taking the time to respond.