Active directory not returning the desired group information for user account when queried via LDAP