I have run into a problem recently when a AD user logs in who is a member of a AD group who I specified in Directory Access to be a admin of the computer that user is not automatically given admin rights. I have to go to the system prefs then accounts and unlock it then check to box to allow user to administer the computer. This wasn’t a problem in 10.3 it automatically made the user a admin account. Has anyone else seen this in 10.4?