Well... that blow my first theory out of the water. Are the groups fairly static? I refer to the group cache feature in KiX 4.02 that doesn't enumerate groups on every logon.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.