Admin Drop Down doesn't show for admin AD user or group

So we have the following

Apache enable for authentication with Kerberos.
Ldap active directory importing data
A AD user and group that have been given all privs.
But They still don’t have the admin menu.

So to make any changes I have to stop apache, run stand alone, and logon as root.

I have checked all the global privs check boxes for both the user and the group.

Neither seems to propagate the permissions.

Running latest RT. On RHEL 6 latest.

Thoughts? This is auth/AD setup is killing me. This should be simpler.

A AD user and group that have been given all privs.
But They still don’t have the admin menu.

Then they’re either

Unprivileged
or
You haven’t given all privs. The Admin Menu is protected by
ShowConfigTab, but if you have admin users, you actually want to grant
SuperUser, not click all the rights. Checking all global rights is
rarely what you want to do for admins, or ever really.

I have checked all the global privs check boxes for both the user and the
group.

Neither seems to propagate the permissions.

This implies you’re not creating Privileged users, go look at the
user’s record in the Admin UI as root.

-kevin