If I run command

net localgroup Users

as SYSTEM user on device, it sows me all users including AzureAD\username users (because they are assigned to the local Users group) so I think if osquery is not using that to get users it needs to be! If it is using the command

net user

then it will have problems!