I was recently tasked with creating a solution that can enforce temporary group membership on a group in Active Directory.  We don’t have a Server 2016 functional level so cool new features like “Privileged Access Management” are out of the picture.  I settled on some kind of scripted/automated solution. More on Privileged Access Management here: …