What DLL or operating system function can I use (from VB for example) to find out to which Windows NT security groups a particular user name (or login) belongs to?