Corrected AD group matching. Now works as intended.