With OES 2015 release, if you run NIT in fetch mode (ad-uid_generate-mode=0) for Active directory identities, operations that require group lookups may not work, for example, adding Active Directory group objects as trustees, backup and restore of group trustees using SMS, and so forth.
It is recommended to switch back to generate mode (ad-uid_generate-mode=1) and perform the operations.
Micro Focus plans to fix this issue in an immediate future OES release.