http://msdn.microsoft.com/en-us/library/ms680275%28VS.85%29.aspx Using the script attached on w2k3 domain I get a response and some groups. On a s4 domain I get The directory property cannot be found in the cache.
Created attachment 5442 [details] A simple vbs script that dump the grouptoken contents
Should be fixed by my latest work in "master". Did some manual testing on SAM objects and the result on s4 and Windows was always the same. In addition I added also a ldap.py testcase which is run by "make test".