Howard, I just ran your script against my account (which has dozens of group memberships) and all appears fine (I painstakingly verified). I'm running an NT4/NT4 wks/dom with wks joined to master. What are the particulars of your domain again ? If memory serves, didn't you have some weird domain problems about a year or so ago, something about your master/resource domain setup ?
