Using GROUP_MEMBERS_POLICY in .audit files

I'm hoping someone can clarify something about the GROUP_MEMBERS_POLICY
check in Nessus3 .audit files.
> From what I read in the documentation, you make a list of users
separated by a pipe sign to specify what members of a given group you
want to check.

What i'm not clear on is if that's a logical AND or logical OR
operation. For example, I might want to make sure the group "foo"
contains members "bob" OR "jane", but not both. Is that possible here?
And similarly, I'd like to have a list of acceptable members for a given
group, but not require they ALL be members. i.e. the Administrators
group may always contain Domain Admins, but may also contain a regional
group depending on its geographic location. I don't want to (and really
can't) implement an audit file for each possible location.

Any suggestions or help would be appreciated. Thanks!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Jeff Mercer - USPS CISO - SVA Team
E-mail: jeff.c.mercer@usps.gov
Phone : 919-501-9448 
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus