squid+squidguard+ldap groups on AD

Hi I have been scratching my head to build the ldapsearch query for squidguard.
My current setup is
proxy : squid
uses ntlm auth to authenticate against windows 2003 AD
filter: squidguard
I am trying to match the user (sAMAccountName) with AD group membership.

My squidguard configuration looks like

src good_users {
        ldapusersearch ldap://ldapserver/cn=Inetusers,ou=Groups,dc=resunleasing,dc=com?sAMAccountName?sub?(sAMAccountName=%s)
}

Inetusers is a group in AD which has a list of allowed users.

I dont think it is matching the source.

my acl looks like
acl {
        good_users {
                pass    all
                redirect http://localhost/block.html
                }
        default {
                pass  none
                redirect http://localhost/block.html
        }
 }

It only defaults to default.
Any help or direction is appreciated.