Add AD user to admin group

Perhaps @davidep has an idea.
I think the problem is similar to this: