Windows 10 Data Loss Prevention (DLP) agent endpoints are joined to an Azure domain(Azure-AD) and the Endpoint agent systems are reporting "Active Directory user group resolution failed". Microsoft Azure Support DLP on the endpoint is in question.
Microsoft Azure support for DLP.
Active Directory user group resolution failed
Symantec Data Loss Prevention 15.8.x
Symantec Data Loss Prevention 16.x
Microsoft Azure Domain joined systems are not currently supported by the DLP Endpoint Agent.
Please contact Symantec Support and/or your Sales Team to be added to enhancement request PM-3103 for this to eventually be added.