Gotcha. Good luck then! Make sure you test with large group memberships, a
mix of security and non-security groups and nested groups from other
domains. There are a variety of ways that this thing can get very
complicated and blow and give you trouble.
Joe K.
"Cathie" <> wrote in message
news:...
> Named user check - for licensing issues 
>
> "Joe Kaplan (MVP - ADSI)" <> wrote
> in message news:OV%...
>> It is actually pretty hard to do this in general, but that is the basic
>> idea. You need to enumerate the members and then enumerate the members
>> of those groups that are also groups. If any of the groups have large
>> numbers of members (greater than maxRangeValue for your domain, typically
>> 1000 for win2k and 1500 for 2k3), then you'll also need some range
>> retrieval.
>>
>> Also, if any of those groups is the primary group, the membership isn't
>> included in the member attribute, so you need a different approach
>> altogether.
>>
>> Why do you need to do this anyway?
>>
>> Joe K.
>>