The updated Active Directory snap module has issues. The memberof attribute on a user record is now only returning a single value. It used to return a string value containing all the user’s group membership, but it looks like that after the update it is only returning the first value.
I have had a case open on this since 5th September and understand it is currently with the development team. As a workaround we are able to use the LDAP snaps.