user tokens to ntsec. Don't test external tokens for primary group to evaluate if it should be overridden. Restrict creating internal tokens to ntsec.
user tokens to ntsec. Don't test external tokens for primary group to evaluate if it should be overridden. Restrict creating internal tokens to ntsec.