You could also use the newly created fnInGroupAD() to determine (universal) group membership for the current user or computer.