Automatically remove and disable unwelcome objects from privileged on-premises Active Directory groups using Microsoft Sentinel