AD group access with users from different domain

I am using SP2019 on premise and security is done through AD groups.

Now, everything works OK, except for the groups that have users from 2 domains.

SP2019 is installed in domainA.

Let's say I have AD group called "admins" and group contains users from domainA and domainB and group is added to SP.

Users in group "admins" who are from domainA have access, but not the ones from domainB.

If I add user from domainB directly to SP group, then he can access SP.

How can I sort this out? AD group is not allowed to have users from multiple domains?