(PUP-3804) Handle Active Directory errors

Error messages on user/group resources attempting to create
Active Directory users or groups are not very sufficient. Provide
an actionable error to the user so it is clear that Puppet cannot
handle creation and deletion of those types of users/groups.