eh?
did I understood it right now either...

you want ingroup to be able to work to check group membership in such domain that the user has no right to check for group membership?
_________________________
!

download KiXnet