Fixed logic concerning using Domain Users.
Fixed logic concerning using Domain Users.

I fixed some logic in using Domain Users where I assume AD#load() was
called first. Even though that is normally the way things would work,
it is possible to just jam new accounts (that don't already exist of
course - and groups) into AD by just making them and syncing. Now
that is possible, but still, do yourself a favor and call AD#load first
anyway. I also made sure that groups that the system attempted to create,
but already existed, have their RID values discovered and modified.

srna/radum