Change group membership for AD user