You would have to write a UDF (EnumGrp) that enumerates the members of a group. As part of the UDF you would check the SIDType of each member. When you encounter a member that is a group, then you recursively call the EnumGrp UDF passing it the name of the group.
The functiona call would enumerate the members of the embedded group. If a member of that group is a group the process again recursively calls the UDF again and so on.
At the end of the program you have listed ALL the user account in the group and the groups that that are members of of the group, etc.
If you do not have the experience to write this code, I could provide a compiled Perl program or a KiXtart script that accomplishes this task. Unfortunately, I do not know when I get to it. Maybe a couple days?
