Changing Active Directory group in Symantec Protection Engine 7.5