***Solution***

Ok, so after about 10 hours of log reading, tinkering, and swearing I found a solution to this problem.

The main part of the fix is the group memberships in the...