Bugs:
- After upgrade to 2211 read only access is no longer working if you use Local System and AD groups. Only Gateway administrators can connect to the WAC.
 
 
- The Local System groups used previously to grant access (for example Windows admin center readers etc.)  cannot be added to the new Allowed Groups because Allowed Groups does not allow spaces in group names. Attempting to add one of the old groups shows an error while typing that: "only the formats domain\groupname for domain groups or (group name) for local groups are allowed". The only groups that were added to Allowed Groups post upgrade were BUILTIN\Administrators and BUILTIN\Users.
 
 
- If you create a new local group (or use and AD group) with no spaces in the name with Gatway User rights, end users get an Access Denied message and cannot access WAC.
 
 
- If you create a new local group (or use and AD group) with no spaces in the name with Gatway Administrators rights,  end users can access WAC.
So seems like there is some issue with the internal logic of local system/ad groups.
 
Edit: Can confirm in the Event Log on the WAC server that the users are denied access because they are not in the administrator role. Gateway users rights seems to be ignored.