When using the Group Policy tools to apply an entry to the sudoers file in 4.0 and you browse for the user the entry is being formatted in the sudoers file incorrectly.
user\@domain ALL=(root) ALL
The entry should simple be
user ALL=(root) ALL
This is a product defect in the VGP tools
This is a product defect and will be corrected in a future version of Quest Authentication Services.
Instead of browsing for a user account when setting up the rule simple type in the samAccountName instead. The entry in the sudoers file will be formatted correctly.