Software components run as a named user called darwin.   Assuming you installed the boot strap agent.   Have you investigated that route?  What errors do you see on the domain controller?  what account do you run the script as when connecting via vRO? Interesting one for sure.  Previous roles I've done MS and AD, not so much on the linux side (but am learning now)