Yup that worked flawlessly

. Maybe that could be the default in the product or even just another attachment something like "Use only primary groups" and another "Check both primary and secondary". I attached the edited version of your product if you want to throw it up alongside the first for those that want it to apply for both primary and secondary groups. I didn't rename it or anything of the sort I just went through with PSPad and changed the line

.