Fixed in master with 376dc5c The RID was for the builtin guest, not the guest account in a domain.
Created attachment 7736 [details] Backported patch to v3-6-test
Great catch ! LGTM. Re-assigning to Karolin for inclusion in 3.6.next. Jeremy.
Pushed to v3-6-test. Closing out bug report. Thanks!