tt does the Group management itself and does not synchronize groups with AD server when user logs in.
By default, users will be the member of tt default group irrespective of AD Server group, administrator can change the group membership.
tt uses authentication attribute for authenticating users with AD Server.