Domain Access - restrict content for only authenticated users (and keep domain specific settings)
Actually I found the issue was with the content_access module. It was overriding the settings for the domain access. 

Once this was turned of domain was able to operate as designed with just the 'publish to ...' settings.