Well since a CP150 is being used, then why not use the CP interface. Assign the extensions in the group as alternate extensions to the GDMB. Give the users "phantom" mailboxes with no extension info and let them use the CP interface to log into there mailbox.