ADSI mode is only supported when there is no domain configured.
but when you add a domain if you are running on windows the options for testing the domain config and the TLS options are missing.

https://github.com/jenkinsci/active-directory-plugin/blob/88b2d311ad7eb2b003a7ffba0c19d5ef98632bf7/src/main/resources/hudson/plugins/active_directory/ActiveDirectorySecurityRealm/config.jelly#L4 is in effect when running on windows even when it is not in a domain and you have specified domains.

The block is missing the validate and TLS options that are available when `canDoNativeAuth` is false