The user is a member of a group in Active Directory that has the default acls removed.
This type of group shows up in Active Directory Users and Computers as type 'Unknown'
Defender is unable to read this group information.
This can be caused by removing the default acls from a group such as 'Authenticated users'