One could dump the group and only output the members that show as SIDs. Then feed those SIDs into LsaLookupSids method in Win32Admin3. That would confirm return the proper error code to let one know if the SID was not found or the domain could not be contacted.
