I am having a similar issue at the moment.
Some of my \conf\local.protected.php:
$conf['disableactions'] = 'register';
$conf['useacl'] = 1;
$conf['autopasswd'] = 0;
$conf['authtype'] = 'ad';
$conf['passcrypt'] = 'ssha';
My entire \conf\acl.auth.php:
# acl.auth.php
# <?php exit()?>
# Don't modify the lines above
#
# Access Control Lists
#
* @ALL 1
* @Domain_Users 8
I log in with my AD account and then do a check (&do=check) which enumerates my groups:
"You are part of the groups (censored), Domain_Users,"
and my permissions:
"Your current permission for this page is 1"
The weird part is, if I set the Domain_Users as a superuser in \conf\local.protected.php and log in, I have 255 access (and so does everyone else who is in the Domain Users group):
$conf['superuser'] = '@Domain_Users';
What is going on?