If I were you, would test things like this:
Go into registry and delete this key:
HKEY_CURRENT_USER\Software\KiXtart\TokenCache
This is where Kixtart caches it's groups, it will cache all your group memberships only when/if you use the INGROUP() function, then I would run this script:
Code:
break on
$start = @TICKS
if ingroup("domain users")
?"In domain users"
endif
?"elapsed=" @TICKS-$start
exit 1
THen show us the output strings from this script ... then RUN THIS SCRIPT AGAIN and you should see a much improved reponse time.
btw, we have thousands of groups and over a hundred InGroups in our login script, the script takes just a few seconds to run.
-Shawn