I had a need to get the members of one AD group so I could use their OSUser name as part of a conditional expression on a tab.
Rob's applet returned the entire AD and took 16 minutes for a company with less than 1000 UserDNs. It was overkill for my needs.
I created an applet that takes the AD group name (or set of AD group names) and returns the members of that (those) groups.
This takes a few seconds.
(Error checking is left as an exercise for the students.)
Thanks to hints from Rob's applet (see below link) and from some posting on various SQL forums.