This would be a nested process. First you use the format listed above to enumerate the current groups membership. you then need to check the SIDType of each member. If the SIDType is a group then you need to bind to that group and enumerate it.

code:
SIDTypes
-  -----------------------
1  SidTypeUser 
2  SidTypeGroup 
3  SidTypeDomain 
4  SidTypeAlias 
5  SidTypeWellKnownGroup 
6  SidTypeDeletedAccount 
7  SidTypeInvalid 
8  SidTypeUnknown 
9  SidTypeComputer


[ 13. March 2003, 15:09: Message edited by: Howard Bullock ]
_________________________
Home page: http://www.kixhelp.com/hb/