I was thinking along the lines of checking the cache in:
HKEY_CURRENT_USER\Software\KiXtart\TokenCache
This would require that you invoke InGroup() to populate the cache.
But if what you have works, then go for it.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
