I have a user who isn't added directly to the site but is a member of a domain local group that has been added to the viewers group. The user gets access denied. If I add them to a domain global group in AD and add that domain global group then there is no problem.
Is there a problem giving access to domain local groups (these are not the same as machine local groups) as opposed to domain global groups
SharePoint Products and Technologies1