$Web.AssociatedGroups is not returning correct results

Question

Hi all, I have a script that syncs AD Groups to SharePoint Groups. If you ask me why, because SharePoint works better with Users in SharePoint Groups, not AD Groups (Workflows and other stuff like Site Mailbox). But this is not the Point, I am struggeling
with the AssociatedGroups property of the Web Object. The first sync works, but then I do not get the right values when I change associations and resync. It only stays with the first values.
Example: I add a Group AD_SMB-Test to a Web, then to a Subweb. Then I remove it from the parent web, but leave it on the Subweb. The AssociatedGroups Property of the Web Object now still shows the group, even if I removed it. Any Ideas?
To understand the Script, here it is...
asnp *sharepoint*
# Give the WebApplication you want to Sync
$RootWebApp = "https://portal.demo.local"
$Domain = "DEMO\"
# Find all  Site Collections
$Sites = ($RootWebApp | Get-SPSite -Limit All)
foreach ($Site in $Sites){
    $SyncedGroupArray = @()
    #Find all Webs
    $Webs = $Site.AllWebs
    foreach ($Web in $Webs) {
    Write-Host "Going for Web : " -NoNewline -ForegroundColor Green
    $Web.Url
        # Find all Groups
        $SPGroups = $Web.AssociatedGroups
        foreach ($SPGroup in $SPGroups){
        Write-Host "Now getting Group : " -NoNewline -ForegroundColor Yellow
        $SPGroup.Name
            # If one of the SharePoint Groups starts with "AD_" then it should be synced
            if ($SPGroup.ToString().StartsWith("AD_") -eq $true){
                $ADGroupName = $SPGroup.ToString().Remove(0,3)
                $ADGroup = Get-ADGroup -Filter {name -eq $ADGroupName}
                # Check if Group was already synced through another Web
                if ($SyncedGroupArray -contains $SPGroup.Name) {
                    Write-Host "Group already synce, breaking out"
                    break
                # Check if AD Group really exists
                if ($ADGroup -ne $null){
                    $ADGroupMembers = Get-ADGroupMember -Identity $ADGroup
                    # Take all Members Login of this AD Group into an Array to make up SharePoint
                    $SAMArray = @()
                    foreach ($ADGroupMember in $ADGroupMembers) {
                        $SAMArray = $SAMArray + ($Domain + $ADGroupMember.SamAccountName)
                    # Now iterate through SharePoint Group to find users that need to be deleted and create an Array with all of the "left overs"
                    $SPUserArray = @()
                    foreach ($SPUser in $SPGroup.Users) {
                        $SPUserlogin = $SPUser.LoginName.ToString().Remove(0,7)
                        if ($SAMArray -contains $SPUserlogin) {
                            $SPUserArray = $SPUserArray + $SPUserlogin
                        else {
                            $SPGroup.RemoveUser($SPUser)
                    # Now iterate through the AD Group and add missing members to SharePoint Group
                    foreach ($ADGroupMember in $ADGroupMembers) {
                        $ADUser = $Domain + $ADGroupMember.SamAccountName
                        if ($SPUserArray -contains $ADUser) {
                            #Do nothing, User is already present
                        else {
                            New-SPUser $ADUser -Web $Web.Url -Group $SPGroup.Name
                    # Set this Group marked as Synced for this Site Collectin
                    $SyncedGroupArray = $SyncedGroupArray + $SPGroup.Name
        $Web.Dispose()
        # sleep 5

Answer 1

Not sure what you mean when you say you remove the group from the parent.  Groups are always maintained for an entire site collection.  You can remove the permissions assigned to a group at the parent level, but that won't remove the group.  The
group is still there.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.