https://ksfboa.com/tech/jacki/refresh-ad-groups-membership-without-reboot-logoff.html