Vista - VBScript nesting groups cross domains

I am stuck!

The task is simple. add a domain global group in domain-a to a
domain
local group in domain-b. The domains are in different forest. This
works fine using AD Users & Computers but not in a VBscript.


In AD Users & Computers, I view members and what I added via the gui
is fine. View the members of this domain local group using ADSIedit
and the entry I added that resides in a different domain looks like a
SID or something. I.E. cn=S-1-5-21-
nnnnnnn,CN=ForeignSecurityPrincipals,DC=domain,DC=com.


If I use this string in my script instead of a normal Distinguished
Name the cross domain member add works fine.


How do I retrieve a ForeignSecurityPrincipals for a group?


Google has not been my friend on this one. :-( Or maybe I didn't ask
the question correctly.


Thanks
JimW-Atl (Atlanta)