The Active directory plugin must be configured to use SSL (ldaps protocol ) in order to be able to add/remove users.
Not sure if you already saw following document http://communities.vmware.com/docs/DOC-21481.
There were some issues wuth the 1.0.2 GA version of the plugin that got resolved. I will recomend you to use the 1.0.2-683 version.
