That is correct, but nobody asked for universal groups, neither for distribution groups or anything.
Well, I must confess that someday I'll have to deal with that //LDAP provider thingie but not for now 
Right, let's recapitulate that the //WinNT provider DOES support OU-structures;
QED
_________________________
