Make sure that the ingroup() is working - Win 9x machines need the RPC service installed on all your domain controllers / login servers and must have the kx95.dll file installed or available on the clients.