Let me try and answer all of the new troubleshooting questions:

Delete the persistant connections first: I've done that, check out the top of the script. I don't do a * becuase I need to only remove certain letters and I never map outside of those I've deleted. I'm not sure why the /persistant would apply to the /delete but I can try it if you think it'd help (the real issue here is the INGROUP - that I've been able to determine).

Check the registry on a client computer. Does this key (HKEY_CURRENT_USER\Software\KiXtart\TokenCache) exist?

Yes - with all the different users I've tried in it.

Using your code sample would be just like using mine without the mapping statement, right? Regardless, it goes to the ELSE section for all groups tested against.

Running the script locally: Yes, I tried, the script runs rather slowly locally as well. In debug mode, it hangs for 5-15 seconds on the first INGROUP and then processes normally beyond that. The results still aren't what I want, but that is what I think is causing the speed issue - some bad lookup somehow/somewhere.

Thanks for all the new ideas...
_________________________
Thanks, Sasifras