Another idea is to add ability to InGroup to list Distribution groups membership also. As the code sample in vbasic above does - this is very useful.