I do know how to use UDF's and I think I recall seeing this one in the past. However I'm not sure this would work for nested groups, such as Domain Admins.