I am not quite awake yet. If you are using 4.02, the OU location is truly not relevant because the function checks the clients security token and does make a call to the DC for global groups.
_________________________
Home page: http://www.kixhelp.com/hb/