Hmm, thanks, I'll have a look into that. The objection to nest using "Google for Domains" or whatever they changed it to these days seems to be to do with the domain admin having access to everything. Which would be just fine for me, as I'm the only one that uses the domain.

Hopefully signing my address up that way, when it's already a domain account, won't b0rk all sorts of other things :/