If you want to do form processing you will need both KiXtart and KiXforms.

KiXtart provides the script interpreter that executes your code and KiXforms provides an API that allows KiXtart to manage forms and a few other very useful functions.

KiXforms has a small overhead in that the DLL which provides the API must be copied to each machine that will use it and then registered. For support tasks like the one you are talking about this is rarely a problem, and is certainly much easier than the alternatives for providing form handling.

If you are new to scripting you should break down the requirement into small parts and get each of them working - start with the LDAP query, then get the add/remove group code working with a fixed group name. The forms/GUI part you will do right at the end when you have everything.

Start small and post when you get stuck. Don't worry if the script is mangled, ugly and completely non-functional.

You can post here or on the KiXforms board for KiXtart help queries, but you're better posting to the KiXforms board for KiXforms queries.