Searching AD for groups using LDAP can be tricky as it often involves using the groupType attribute, which requires a bitwise filter. Another attribute that can be useful is the sAMAccountType attribute, but you need to be careful as Universal and Global
Read More...