Let me see if I understand what you are attempting to do...
1. You have global groups (named using a share name) that contain people that can access a given server.
2. You have local groups on a server (named after servers) that contain people that can access a given share.
3. The local group can contain global groups - why?
Please describe the business/security process you want to employ.
Please confirm that the problem of the duplicate groups arises from the fact that the person is a member of a global group and that the same of different global group containing the same person is also located in the local group.
{edit} changed #1 and #2. Had Group to server/share relation reversed.
[ 25. March 2003, 14:30: Message edited by: Howard Bullock ]