(&(objectCategory=group)(SAMAcCOUNTNAME=*grp*))