Active Directory group resolution fails on some endpoint agents