如何让ASP.NET MVC authorize属性与嵌套AD组中的用户一起工作？

<system.web>
  <authentication mode="Windows" />
  <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider" />
</system.web>

using System.DirectoryServices.AccountManagement;
using System.Web.Mvc;

public class CustomAuthorizeAttribute : AuthorizeAttribute
{
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        using (var context = new PrincipalContext(ContextType.Domain))
        {
            var userPrincipal = UserPrincipal.FindByIdentity(context, httpContext.User.Identity.Name);
            var groupPrincipal = GroupPrincipal.FindByIdentity(context, "YourNestedGroup");

            if (userPrincipal != null && groupPrincipal != null)
            {
                return userPrincipal.IsMemberOf(groupPrincipal);
            }
        }

        return false;
    }
}

[CustomAuthorize]
public class HomeController : Controller
{
    // ...
}