Nope, APP-Allscripts is an actual group in AD. Thanks though, I can definitely see using InContainer in the future.

I didn't know if my syntax was off or something, or placement in the kix file?