I've got the computer on the domain easy enough and can browse the server by (in the AD account) of the users you want to be able to log in to the Mac..