I've changed the routine to fnLDAPQuery as it seemed to be a better option (and more up to date). I've checked the error checking - $oRS.BOF AND $oRS.EOF both read as nothing (as if no data was returned). @error returns 0 and @serror returns 'The operation completed successfully'. It doesn't seem to complain about anything, it just doesn't return anything at all. It's a two-way trust between the domains, using WMI I can enumerate groups on both sides without trouble but as you know, I had trouble with WMI and the size of the active directory I have to search. Any thoughts?