would not the the AD "Domain Local" be the same thing as a NT4 domain controller "local group"