Writing LDAP Query

Your Output is going to be an issue. The Output is the attribute name in Active Directory so, your {Initiator} value isn't going to be valid. Try something simple like department, mail, or sAMAccountName. 

Here's a screenshot from a working UDA I have for pulling user info from Active Directory:

If that doesn't work, you have some other issues going on.

If it does work, then start to expand on it where you can change 'sAMAccountName to another attribute.

For groups, you can try this:

(&(objectClass=group)(name=GroupName))

I'm sorry. I should've been more clear.

In the Run Now screen, you cannot use the variable names. So, you'll need to replace those with actual values for testing.

Where it says {WorkflowVariable:ADUserName}, replace that with an actual value like your username. And, it looks like you have duplicate brackets. 

If my usename is username, that portion would look like this:

sAMAccountName=username

Also, you're using the wrong value for Output. Try entering the word mail to return the email address. Or any of the other examples from my screenshot like givenName, department, or phoneNumber.

Here's an example from my environment:

I've blurred out my username, but I manually entered it into the Query field. It's just plain text without quotes, brackets, or anything else. 

You'll see I've set my Output to 'department'. This is just one of many attributes you can pull from AD.

And then, in the Results field, you can see it's returned the department for the one match it found. If I had entered a wildcard, it would've returned all departments for all users that match the query.

You know what? Let's take a step back and go very basic. Let's simply query using a wildcard so that ALL results are returned. That way, we'll definitely know if you're in the correct branch.

I don't know if you can see it in the image, but I've replaced the username with an asterisk (*). 

So now my entire query is:

(&(objectCategory=person)(objectClass=user)(sAMAccountName=*))

Try that and see if you get any results back. If you don't, you're definitely in the wrong branch, or something else is wrong.

I should also point out that even if a field is blank in AD, the query should be returning data like this:

In this example, the first values returned are from system accounts (because I used a wildcard) and so they don't have a department listed. The query is still returning a value for them: [Empty value]

Would I be correct in assuming you're not the AD person at your organization? If you are in the wrong branch, perhaps you can talk to them to see if they can help you find the correct one.