I&#039;m building a "security manager" application to administer security rights to different parts of our company intranet. <BR><BR>Users can belong to groups, and users, or groups can have access to applications.<BR><BR>In order to simplify things for our domain admin&#039;s I&#039;d like to utilize our existing Active Directory groups.<BR><BR>Please bear with me, my Active Directory knowledge is shaky at best. My questions is the following:<BR><BR>Is there a property of active directory groups that I can use as a unique identifier in my SQL DB? "usncreated" looks like it would do the trick, but does it ever change? Can I even use a property like that to do a lookup?<BR><BR>Thanks in advance for any help!<BR><BR>-Justin