Hi Lukas this is bug in your version of samba: https://bugzilla.samba.org/show_bug.cgi?id=14153 upgrade samba to get it resolved. I am using 4.12.6 and group members are enumerated properly into AAD. br michal