Copy group membership from one user to another in AD