This code is written using the the NT4 compatible WinNT:// ADSI provider. If you want to understand nested group memberships, then someone needs to investigate other methods Microsoft has to check group membership. If I get time, I may sift throught MSDN.microsoft.com to see if the LDAP ADSI provider support this. If Microsoft can perform this task, there is usually way for us to access that functionality.
_________________________
Home page: http://www.kixhelp.com/hb/