I had this same exact issue and what fixed it for me was adding the "split-dns value" command in my group policy. In your example, try "split-dns value abc.xyz" and make sure you also have the "default-domain value abc.xyz" for that group policy as ...