A. This is because under SQL 7.0 the code necessary to evaluate all the roles/NT groups etc. was deemed too expensive. However this is a legitimate security concern and Microsoft are thinking about changing the way this works back to the old behaviour.