https://marcmylemans.github.io/posts/Active-Directory-DynamicUserGroups/