AD user object ACL owner issue

[SokratisUNI]

Hello,

I've noticed a weird issue which I've been trying to solve for quite some time. On one specific account, the owner of this object was updated to another group "Domain Admins", but PingCastle reports that the old groups still have Full rights.

I have used different tools to list all permissions, inherited or not, but cannot find why this is being reported by your tool.

Hopefully, I am not missing something obvious here :)