Chris,

Minor FYI... The WINNT provider method DOES NOT work with Universal group membership as it doesn't know anything about them. You have to use an LDAP method for Universal groups.