How were these accounts added from Active Directory? Were they added via a group or individual user accounts? You will need to update either the group or the individual user accounts to properly reflect the permissions they should have. By default, all new users created in Orion are non-admin until otherwise specified.
