Let me see if I understand what you are attempting to do...

1. You have global groups (named using a share name) that contain people that can access a given server.

2. You have local groups on a server (named after servers) that contain people that can access a given share.

3. The local group can contain global groups - why?

Please describe the business/security process you want to employ.

Please confirm that the problem of the duplicate groups arises from the fact that the person is a member of a global group and that the same of different global group containing the same person is also located in the local group.

{edit} changed #1 and #2. Had Group to server/share relation reversed.

[ 25. March 2003, 14:30: Message edited by: Howard Bullock ]
_________________________
Home page: http://www.kixhelp.com/hb/