New to the forum, but have a problem that I need some help with (please) Our company has used deprovision policies that remove all AD groups as the user account gets deprovisioned for some time. Company has now instigated an approval process for some AD groups. I’m trying to find a way that when accounts get reprovisioned any AD Groups now requiring approval are not automatically added to the account even though the account was previously a member of these Groups prior to the approval process being implemented.