When we are a member of an AD or Samba domain, we will incorrectly add 'domain users' of the domain as the primary group. Fixed in master with 38a4703
Created attachment 7735 [details] Backported patch to v3-6-test Patch tested. With this patch a user without access to the "Domain Users" group no longer has access to a folder where only "Domain Users" have access.
Comment on attachment 7735 [details] Backported patch to v3-6-test LGTM.
Re-assigning to Karolin for inclusion in 3.6.next. Jeremy.
Pushed to v3-6-test. Closing out bug report. Thanks!