Sure, this is a very simple one:

If InGroup("LGPDNLEI\ggNLEIPTE-IES")
? "CBC"
Else
? "nope"
EndIf

LGPDNLEI is the name of the domain. When I add a user to this group, run this script on the users's PC, he is not in the group according to KiX.

Even when I refresh the tokens, logon again or reboot. Only a shutdown of the machine works detetcting that the user is in that group...

Using Windows 2000 Professional, SP4 & the latest security patches from Microsoft.