On first login I can see in sltrace log that only the local groups are being found, However after login and a policy refresh is forced sltrace log will show ad group memberships are found and all polices apply as expected.
This is only happening on a few user accounts so far but fear it may grow.