Just a little update. I've found out about the 'id' command and the 'wbinfo -r' command. Both of those commands do NOT return any domain groups that are parents over domain groups for the user. I don't know if this gives any ideas or means anything to anybody. James Dinkel