Hello,
ISC won’t be able to remove default AD group “Domain Users“. Here is another post discussing the same issue, https://developer.sailpoint.com/discuss/t/provisioning-issue-for-ad/86881
Best,
Vikram
2 Likes