Active Directory (AD) Groups are not synchronized correctly