you could recreate the global domain groups on the local nt workstations. and use the following......

if ingroup("local group") = 2
use x: "\\server\share"
endif

Don't know how well this would work but it sounds good on paper

the hard part is having to create local groups on all nt workstations

Bryce