Fix to admin group checking for active directory