Here is a stored procedure based solution that parses the commas into a tablevar and uses no dynamic sql. Some more details are at :

http://accesshelp.net/content/Report.asp?REPORT=4&PARAM_ID=46

CREATE PROCEDURE [dbo].[SelectEmployeesByID]

@IDList varchar(2000)...