I recently came across this http://www.rlmueller.net/MemberOf.htm whilst trying to help someone debug a logon script.

It seems the MemberOf attribute on a user object can behave in an odd way which is not helpful.

The main site also contains some useful info.