I got the following error in the event viewer if the root site collection is not created and readable for all users:
"an exception occurred in ad claim provider when calling spclaimprovider.fillsearch(): access denied.."
You can also set the ULS category "General" for "SharePoint Foundation" to see this behaviour.