Allow admin's to specify user NetworkIDs in the sync settings or change the AD sync to also pull the domain's shortname. Sync worked for us, but it pulled the fully qualified domain name rather than the short domain name. Users were synced and created successfully, but their NetworkID doesn't match the Windows session username which uses the short name of the domain.

full.domain.com\user vs full\user