MS-RAA seems like it provides a way to dynamically get the group SIDs ...
realrichardsharpe at gmail.com
Tue May 13 06:08:08 MDT 2014
MS-RAA 184.108.40.206 AuthzGetInformationFromContext (Opnum 4) seems to be it.
More information about the samba-technical