Is it still Novell's recommendation NOT to MIX AD and ZCM group policies? We deliver all computer-based policies via AD but all user-based policies via ZCM. The reason being it is much easier for me to organize and apply policies based on edir user groups. I do on occasion have some issues with zcm policies not getting applied but I can usually fix that by incrementing the policy version number.

Thanks, Chris.