Domain local groups are not visible to member servers or workstations until the domain is running in native mode. I do not have any experience with native mode, domain local groups, and KiXtart at this time.

Check the registry on a client computer. Does this key (HKEY_CURRENT_USER\Software\KiXtart\TokenCache) exist?

code:
if ingroup("GlobalGroupName")
	? "In the group"
else
	? "NOT in the group"
endif
Execute the code in a DOS window. What is the result? Note that If you make change to a group you will have to logoff and logon before testing. This is because INGROUP reads the Global Group membership from the security token of the user and does not check the domain DC.
Write a simple test script that references a global group.

[ 27. September 2002, 23:53: Message edited by: Howard Bullock ]
_________________________
Home page: http://www.kixhelp.com/hb/