Just a thought...Could he be having the same problem I wrote about a couple days ago. That being that the new INGROUP does not query the SAM like 3.63 did. If he just added the account to the group and did not logon again INGROUP would correctly report that the user is NOT in the group since it now checks the cached groups attached to the security token.[ 24 January 2002: Message edited by: Howard Bullock ]
