I have users in domain groups, which we set permission on. Some users get access denied to certain content some of the time, but not all of the time. It's very hard to search for errors in this case. So I'm thinking of adding SharePoint groups, set permissions on these groups and add domain groups in these Sharepoint groups and hope that this will solve the problem.
But I'm not sure if this is the way to go. Am I on the right or wrong track here?