Multiple Active-Directorys and NTLM authentication

Hi there,

this is the situation:
XG 430 in HQ, several Branch-Offices with there own Active-Directorys.

Thats the mission:
Use these multiple ADs to authenticate Users via NTLM.
Every AD has a group where the users that need internet-access belongs to.

Thats what I did:
- Adding all the AD-server into XG
- Testing connectivity
- Import the "internet-group" via the wizard into XG
- Check the AD-Servers under "Authentication Server List"

Some questions here: -> Is there any preferd priority order? What does the "Default Group"?

What I tested:
With two branch offices the NTLM authentication seems only to work for the one on top of the "Authentication Server List".

Big thank you for everybody who read this and maybe can help me :)