Had the same problem when we upgraded. I was told the account used to query the Active Directory domain needed to be a Domain Admin. Domain Admin rights are way too much. The account just needed to be a Domain User with the ability to reset passwords on the Domain. I hope this helps. ... View more