@george63 , I had this same issue, where only my domain admins were getting authenticated, and my users were getting an error 500. Regarding your link to
george63 this Microsoft tech community article.
I had to end up using Method 2. Works like a champ now!