Now I have tried to remove my user from a group called IT and then run Richards script - according to kixtart my user is still member of the group IT but according to NET GROUP my user is NOT member of the group. Why is kixtart reading the group memberships wrong?