This might be able to be simplified by the following:
 Code:
[00:25:9C:AD:43:D6]
Location=Preparation
Groups=students,teachers,aides

[students_00:25:9C:AD:43:D6]
Share=HP LaserJet 1320nw - Support:LaserJet1

[teachers_00:25:9C:AD:43:D6]
Shares= HP LaserJet 1320nw - Support:LaserJet1,Xerox WorkCentre 7345:Xerox1
In this manner, you can directly look up the BSID MAC and determine the location and allowed groups. Split the groups list and do an InGroup - if a group matches, then read the section that combines the group and MAC identities and map the shares listed there.

Trying to combine the group and MAC directly adds unnecessary overhead and complexity. it also provides more flexibility to expand beyond two hard-coded groups.

Glenn
_________________________
Actually I am a Rocket Scientist! \:D