[Samba] AD group member troubles

[Franz Ferdinand]

Hidiho!

 >Check to see if the # of Windows group sto which each user
 >belongs >= NGROUPS_MAX (normally 32).

Both are members in more than 32 groups (and because of the strict 
security policy I can't take them out of any group) :(
Whats next? Compile every software installed on the servers with 
NGROUPS_MAX = 128 (wherever this value is defined...)?

Greetings

   Franz