As far as I can tell the /f didn't solve the problem, my enumbroups script above, when run, still shows inconsistencies in group membership.

I just did my test script again, 3.63 showed all groups I belong to fine - just about 13 groups total, the 4.02 one shows those plus any local machine groups or AD groups I belong to *but* is still missing a couple of groups. Another interesting item is that I see a couple of group names being listed twice. This is all fine but the one group that the 4.02 is not showing happens to be a group that we need to query to map one of the most important drives...