Three Regretably, the Get-ADPrincipalGroupMembership cmdlet is broken in such a way that can make it basically unreliable, so I don't endorse applying it. The script I posted in connected answer works appropriately, although. For those who implement the definition really pretty much, yes, but I have always seen it reserved https://alfredr853hjk3.blogacep.com/profile