ScriptBlockText:get\-ADPrincipalGroupMembership* OR (ScriptBlockText:get\-aduser* ScriptBlockText:\-f\ * ScriptBlockText:\-pr\ * ScriptBlockText:DoesNotRequirePreAuth*)