I cannot get ingroup to work and have narrwoed it down to a permissions issue. A regular "Domain User" account cannot lookup group membership while a domain admin can. This is on a Win2k mixed mode domain with a Win2k client. This is very frustrating. Any ideas?