OK,
The groups will be user input (TA.TIMEKEEPER for example),
the domain is global.shsystem.org

I'm running Kixtart 4.22 and I'm one of the Domain Admins.

Mark