Troubleshooting Active Directory BCAAA group name membership problems using getsid.exe