Update:
I found a link to definitive information from Microsoft that indicates the wildcard won’t work with that type of DN attribute… however there was listed a way to NEST groups! Yes!
Here is the url:
http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory -ldap-syntax-filters.aspx
All members of specified group, including
due to group nesting (Note 10)
(memberOf:1.2.840.113556.1.4.1941:=
cn=Test,ou=East,dc=Domain,dc=com)