Granting Active Directory (AD) groups access to a database can quickly become complex when the AD groups may nest many levels. Consider the following scenario:   You are requested to give Joe the same access to a database as John has. You look up John in the database, and find no trace of John. You then find a bunch of AD groups have ...