The agent reports "Failed to modify the group membership of the user. The object already exists."


Symptoms

When attempting to create an Active Directory user account you receive the error "Failed to modify the group membership of the user. The object already exists."



Cause

When you create a user account and assign the user to the Domain Users group in the domain you may see this error. The Domain Users group is managed by Windows and the account will automatically be added to this group without manual intervention.



Resolution

Remove the Domain Users group from the Member Of tab of the Account Creation Task.