Adding domain user to local group when access to active directory no longer exists
Solution 1:
Would you believe it, I had a brainwave just moments after asking the question.
I opened PowerShell and used net localgroup foo-group foo\mike /add.
Hey presto, the domain user is now in the local group.