|
I agree whit that way.
The only problem is the end of your explanation : "then you need to bind to that group and enumerate it."
How to enumerate the groups the binded group is member of ?
It's almost easy to get the groups a user or a computer is a member, but the groups a group is a member...
That's a functionality we much use in AD : global groups members of other global/local groups.
| 
