All machines are XP Pro (not home, they don't work outside of P2P). I have 1 W2K machine I could possibly test on, although production must use XP so it'd be a sanity check thing.

W2K Server, native AD structure.

Groups are all created as - Global / Security (production groups are all Universal / Security, but in this environment, Global is what they would have to be)

Most groups are created under other OU's outside of the normal OU's. Strangly, this seems to be a common point of issue until I try to move one of these groups into the normal OU for groups (where the DU and DA's are at) and it still doesn't work.

The big thing for me is that when you run the kix.kix script that comes in the sample directory on the 2nd or 3rd page where it lists all groups user is in, it ONLY lists system-created groups. Lastly, my groups look the same (Global/Security) as the syscreated groups.

I thought ingroup was AD compliant...maybe I missed something.
_________________________
Thanks, Sasifras