Alan,
It does correctly work if done in the client context via Fixlet Debugger – the info above is from Fixlet Debugger in Client Context.
The results however also mirror what I’m seeing in my analyses:
The relevance from the domain groups column is:
(name of it, names of groups of it) of (logged on users of active directory)
Bill