I am trying to remove the group from a user in AD when they move to a different OU. I simply did a remove destination attribute value on the user object (current object) on the "memberOf" attribute but I got error 53, "unwilling to perform". I thought I might have that issue since memberOf is a computed attribute. So instead I have to determine the old group of the current object and modify the "member" attribute of the group, which is slightly more difficult. Is there an easier way, similar to my first attempt? Maybe I'm just thinking about it wrong but it seems more convoluted and I'm thinking there must be a simpler way I'm not aware of.