I use claim authentication for sharepoint 2016. AD group are Security Group - Domain Local.

I took this code that was on this forum, but does not work for adding AD group

 Function AddADGroup($SPGroupName,$ADGroupName) { $SiteCollection = "http://yoursitcollectionurl" $site = Get-SPWeb $SiteCollection $site.EnsureUser($ADGroupName) $ADGroupSPFriendly = $site | Get-SPUser $ADGroupName Set-SPUser -Identity $ADGroupSPFriendly -Web $SiteCollection -Group $SPGroupName Write-Host $ADGroupName Write-Host $ADGroupSPFriendly Write-Host "Added the ADGroup" + $ADGroupName + "Sucessfully to the SPGroup" + $SPGroupName $site.Dispose() } #To Execute this function AddADGroup "Sharepointgroup" "Domain\ADGroup" 

Is this Ok for adding AD secure group ?? Because it does not work!!

AddADGroup "Group1" "i:0#.w|domain\FinanceADGroup"

This is working for adding users, but not for AD GROUP.

AddADGroup "Group1" "i:0#.w|domain\User"

Error

Exception calling "EnsureUser" with "1" argument(s): "The specified user c:0-.t|adfs|fsum/ORG_senat could not be found." At line:5 char:5 + $site.EnsureUser($ADGroupName) + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodInvocationException + FullyQualifiedErrorId : SPException Get-SPUser : You must specify a valid user object or user identity. At line:6 char:34 + $ADGroupSPFriendly = $site | Get-SPUser $ADGroupName + ~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidArgument: (Microsoft.Share....SPUserPipeBind:SPUserPipeBind) [Get-SPUser], PSArgumentException + FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletGetUser Set-SPUser : Cannot validate argument on parameter 'Identity'. The argument is null. Provide a valid value for the argument, and then try running the comma nd again. At line:7 char:26 + Set-SPUser -Identity $ADGroupSPFriendly -Web $SiteCollection -Gro ... + ~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidData: (:) [Set-SPUser], ParameterBindingValidationException + FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.SharePoint.PowerShell.SPCmdletSetUser 

Thanks for all help