https://tossolution.com/2020/03/remove-adprincipalgroupmembership/