You are running into issue where installing user does not have right to
create a group within OU.
3) b. Must be able to create a security group within the OU where the 4 3.0
There is hotfix for the issue soon to be released, with this hotfix you will
get EDW warning.
One workaround is to give yourself right to create all child objects in OU.
Another workaround is to use pre-existing groups and specify groups in setup
<?xml version="1.0" encoding="utf-8"?>
Indira Dhingra [MSFT]