How to make roles use domain accouunts not local

[Premium Plastics]

I have an application that is using windows roles that was untill latly a
domain contoller. since it has demoted to a memeber server only global
groups work in roles, but we have used domain groups for all our
authentication.
is it posible to uwsse domain groups as well as global groups in roles?

 

[Premium Plastics]

Found my problem
the domain level was set to mixed, set it to native and all semms to be fine