karstenkre,
In the /etc/nsswitch file the the sudoers entry should be:

sudoers: files sss

Using AD group names should work, but I'd avoid "Domain Users" for anything but testing.

Hope it helps,


-- lawrence