Trouble configuring domain access and security

Hi, great module - thank you very much!!

MySQL: 5.1.36
Apache: 2.2.11 (win 32 on local for testing)
PHP: 5.2.11

I have a local test install to try to configure the setup correctly. Ultimately I will be running under LAMP but running WAMP local to test configuration.

I am trying to configure a setup whereby I can assign permissions to visitors to either be a member of the domain or a member of the domain and any number of subdomains. Ultimately I will configure permissions for editing/adding content across the domain and subdomain affiliates but haven't got there yet as I want to get the log in permissions working correctly first.

Visitors should be able to log into the domain (test.local) and then traverse (ie without logging in again) or log into subdomains (eg test1.test.local or test2.test.local) if they have permissions to do so.

I have set up various users with access permisions (domain access settings on user page) as follows:

testone - access to domain test.local and test1.test.local
testtwo - access to domain test.local and test2.test.local
testonetwo - access to domain test.local, test1.test.local and test2.test.local

setting $cookie_domain = '.test.local' allows users to correctly traverse the domains and to log into each domain that they have permission to access. However, this setting also allows user testtwo to login to test1 subdomain and testone user to login to test2 subdomain - even when I haven't given them access to those domains in the user settings.

I then installed "Domain Bonus: Login restrict" and experimented with "Domain strict"

With login restrict activated (in the domain settings page and in modules page) and domain strict de-activated I am finding that 'testone' users can't login directly to the test2.test.local domain which is great but if I login to test1.test.local with user testone and then paste the subdomain test2.test.local into the address bar the user stay logged in on the test2 site.

Shouldn't testone user be re-directed to the login page for the testtwo.test.local site as they have no permission to login to this site?

I have then tried activating/de-activating domain strict but can't see that this is making any difference.

I have done so much reading on this module and associated modules and drupal configuration settings I'm beginning to think that what I'm trying to do is just not possible. I'd really appreciate it if you can help to point me in the right direction or tell me I'm wasting my time and that I should be happy with what I've got ;-)