https://cusatum.de/active-directory-groups-powershell/