Checkout my Win32Admin.DLL on my web site. My GrpMaint.exe may also be of some assistance. It can enumerate all groups and then using an input file enumerate all members. I would think that unresolved account would show up as SIDs.
http://home.comcast.net/~habullock/kix_solutions.htm
GrpEnumMembers($Server, 'global'|'local', $GrpName)
Enumerates all the members of a "global" or "local" groups on $Server.
Returns either an array of accounts for Global groups or an interleaved array containing both accounts and account sid types for local groups.
Sid types (local groups) can be:
SidTypeUser
SidTypeGroup
SidTypeDomain
SidTypeAlias
SidTypeWellKnownGroup
SidTypeDeletedAccount
SidTypeInvalid
SidTypeUnknown
SidTypeComputer
Note: it has been some time sine I looked into this usage. SidType may only be available on local group for some Microsoft reason.
Edited by Howard Bullock (2005-11-29 09:40 PM)
