We had the same problem in our master domain model. Kixtart INGROUP function works only fine with local groups on Windows 95. On NT global groups are supported. Create a local SMS group and fill it with the global SMS group, then check to see a user is member of the local group. That should work (worked for us)...