I am trying to figure out how to check the "Manage can update membership list" checkbox in ad from within a vRO workflow. At this point i have vRO creating the group in the correct ou, setting the pre2000 name, setting its scope and type assigning the manage by user and populating the group membership all from within the ad extensions in vRO. I can set this setting from PowerShell with the exchange extension but i would rather not have to shell out to do such a simple function. Does anyone have an idea how i can do this?