upon further research, this is probably your problem
From: https://www.lansweeper.com/knowledgebase/marking-users-as-authorized-administrators/
“You can authorize a domain user for an entire domain and a local user for a specific computer. Authorizing a domain user for a specific computer is not currently possible."