Hi Lisbeth,
You could try applying a filter on the EnterpriseLDAP JDNI Adapter for the group objects:
e.g.
<JNDIServiceName>.windchill.mapping.group.filter=cn=PTC Windchill*
This would restrict Windchill to only query AD groups beginning "PTC Windchill". As long as none of those groups contain "/" it may provide a workaround.
Kind Regards,
Alex