I tried sitting on my hands, but it didn't work.

Pardon me for saying... but this is a poorly thought oout design that is fraught with problems. I suggest you take it back to the drawing board and rethink it. There, that's said...

If you intend on proceeding with this design, then InGroup will not work for you. You'll have to kludge in a work-around using an INI file. Depending on how many users and groups there are determines how you'd setup the INI file sections. Either name the sections after the groups and add users as keys or visa versa. Then use ReadProfileString() to enumerate.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.