AH!
Ok.
What we're trying to do is setup organizational groups by region on the domain controller.
My group enumerates as Domain User.
So, how do I add organization subkeys on the domain controller?
Anyone got a screenshot?