Active Directory has a special search filter option that allows it to filter through chained objects, like nested groups. The capability is described here.

Here is an example of how to retrieve all users in a group, including nested groups:

(&amp;(objectClass=user)(memberof:1.2.840.113556.1.4.1941:={0}))


where {0} is the DN of the parent group.

AD via LDAP - How can I return all ancestor groups from a query?
Lets say you have the sentence


  Today I've met an old coleague on the way to work.


What is the question going to be:


  Who did/do I met today on the way to work?


did or do, and why?

EDIT: Also, in the first sentence, is the I've right? Or should it be I met?
