This optional parameter is used to generate an ADSI group
identifier when checking group membership through a Group= check item.
Defaults to ‘WinNT://%0,Group’ (i.e. the named group in the default
domain). Special characters can be used, and %0 is replaced with the name
of the group being checked, and %1 with the name of the user whose group
membership is being checked.