First step – get groups that domain user is in…
Get-ADPrincipalGroupMembership -Identity user | Format-Table -Property name
Second step – remove member from all groups accept domain users
Second step – remove member from all groups accept domain users