Reporting AD group membership

Keeping track of Active Directory Group membership is a never-ending task. At best it takes a lot of manual work to keep the AD clean, at worst I don’t do it often enough and I quickly fall out of compliance and leave critical security gaps.