https://www.petervanderwoude.nl/post/quickly-catch-active-directory-group-membership-changes-in-configmgr-2012/