Did you by chance modify the built-in user defined group of "Admin Groups"? Go to Build, Groups, and on the left side, change the drop-down for type to user defined groups. Find the one for Admin Groups (the one in your rule) and make sure that the group you have above (Domain Admins) would fall into one of those. I don't think I modified ours and it works as expected. It shows *domain admin*
SSH into your appliance, go to the APPLIANCE menu and run DATECONFIG. Hit Enter a few times without entering anything. The LEM will return what it thinks the current date and time is. Is this accurate? In the right timezone?