LDAP group synchronisation write-only???

I have a problem with the synchronisation between Jira and my AD/LDAP groups.
When adding a user to a group in Jira - everything works fine.
(The User is also added in the same LDAP group.)

But if i add or remove a user at the LDAP group on my domain controller, these changes will no be trasfered back to Jira.
Also, if i remove users from an LDAP group, i'll not be able to delete them manually in Jira from this group. – They will stay in this group, as long as i add them back in the LDAP group.

Here are my personal configuration changes:

• Directory Type: Microsoft Active Directory
• Base DN: dc=my,dc=domain,dc=de
• LDAP Permissions: Read/Write
• Enable Nested Groups (Also not working if disabled!)
• User Object Filter: (&(objectCategory=Person)(sAMAccountName=*)(memberOf=cn=my-atlassian-users,ou=applications,ou=groups,dc=my,dc=domain,dc=de))
• Group Object Filter: (&(objectCategory=Group)(cn=jira-*))
• Use the User Membership Attribute:
  • When finding the user's group membership (Also not working if disabled!)
  • When finding the members of a group (Also not working if disabled!)