How can we in a driver, assume AD, remove the entry from all the
currently granted Group Entitlements?

Thanks
-jim