You could try one of the commercial products such as VAS (Quest) or DirectControl (Centrify). I believe they both have quite good support for multiple domains. -- Luke --