We experience an issue where a few of our AD Users cannot:
1) be added as a local admin on their Windows PC
2) be added to an AD Security Group via the AD Group properties
Here's the catch: The only way to join these AD Users to the necessary groups is if we go into their users profile and add the Security Group to their profile; however, since we cannot resolve their name, we cannot add them as local admins no matter what.
1) We DO have "Users" as an object type when searching for the user
2) We DO have "OURDOMAIN" as the location when searching for the user
When we click "Check Names", we simply get the message: "An object named "username" cannot be found. Check the selected object types and location for accuracy and ensure that you typed the object name correctly, or remove this object from the selection."