I have two SQL Servers (Prod and Test) on the same Domain (yes, awful idea), each run SQL Server 2017.
When I create a new login on a Test server, it is granted with