Options for roles attribute of <authorization>/<allow> tag ...

[Dan Haley]

I'd like to restrict access to a page to the people in a group that doesn't have a unique name, so domain\group doesn't work. I've gotten it to work with the pre-Win2K name, but not all the groups have that name available. How can I specify a full AD path in the roles attribute? <allow roles="distinguished name here"/> I've tried putting the a full distinguished name in using as many different formats as I could find, but none worked

Thanks for any help

Dan