despite of readonly_when_synced=1 is set for the users attribute in admin/handlers/groups/group.py i can still modify the member list in UMC. After saving i get an error message that LDAP object can't be saved. We should disable the "add/remove" buttons for membership management in the UMC groups module in AD member mode.
*** This bug has been marked as a duplicate of bug 35519 ***