checkaccess username shows the warning:
WARNING: User belongs to a group with a GID conflict
Membership of an AD group has been broken out into smaller groups (due to it's size) for example:
None, this warning is expected in this setup. Note however that this is only a warning and does not have any affect on logins.