After the update to Symantec Endpoint Detection and Response 4.5 or later, you may experience errors when trying to add additional Groups.
This issue does not occur if you are using a custom SSL certificate for the SEDR web interface.
This issue requires the removal and re-adding of the Active Directory Domain. Once it is removed, you can add it back in and add the Groups needed.