I find that the ingroup working (returning the correct value) on a group greater than 20 on an NT4 client extraordinary and I will have to perform further testing here to understand why. We have seen in the past where a group name longer than 20 character will cause the ingroup command not to recognize that the user is a member of the group when in fact he was.

Please confirm that you did test logging on as an account that is a member of 'Mapping And Addressing' and the Ingroup function returned a value of 1.
_________________________
Home page: http://www.kixhelp.com/hb/