Have you tried this with users manually created within Kentico and not from AD import? This way it will help you identify if, as Zachary mentioned, the privilege level is set correctly or not.
Depending on how you have done this import, users from AD import could have specific / default privilege levels applied, if not explictly set. Can you check this as well please?