If Users are put in a security group, than this group can be used in the Active
Directory plugin.
If this group is put in a new Security Group, this new group cannot be used.
I presume that Issue 3735 is related (Authenticated Users group cannot be used
in the Active Directory plugin).