If you have a wildcard user 10.0.0.0 and add it to "ourgroup", shouldn't "pts membership 10.1.2.3" return "ourgroup"? Thanks, Erik Osterman