I had a problem with this as well, my solution was different.I was not
putting the full path for the OU/CN. If you have an OU that you've
created in the AD domain, let's say it's JAMF-Computers, and it appears
in the AD directory as ad.domainname.typ...