The problem you are probably running into is that the create group is happening on a different DC from which the resource is using when you attempt to use the new group.
You could add the DC server name to the LDAP string so that the create occurs on the specific DC that the resource server uses for the group reference.
$GroupOU = GetObject ("LDAP://DCname/OU=xx,OU=xx,OU=xx,OU=xx,OU=xx,DC=xx,DC=xx,DC=xx")
Edited by Howard Bullock (2005-08-04 11:00 PM)
