fix dev AD membership requirements