For instance: ads\mdepnorm aka MDEP TSST Norman Testing is in SP-CONTRIBUTORS ADS security group:
The sp-contributors ADS group is in SharePoint group Intranet Members:
It follows that if I check permissions for ads\mdepnorm that Edit level permission will appear Given through the "Intranet Members" group. However, this is not the case:
Permission levels given to MDEP TSST Norman Testing (i:0#.w|ads\mdepnorm) is None.
However, I can log into the site and edit. I logged in with mdepnorm and created an impromptu list called I Made This:
So, Check Permissions is definitely not reporting the correct permissions. This is only happening for ADS users belonging to ADS groups nested in SP groups. If I explicitly place mdepnorm in the Intranet Members SP group, permissions are reported correctly as Edit Given through the “Intranet Members” group.
What is causing this to happen? What setting(s) do I need to check to figure this out? We plan to manage our new SP 13 environment this way, by nesting ADS groups within SP groups, and it’s going to be extremely inconvenient—at least—to not have correct reporting of permissions.