I manage permissions using ad groups to specific folders and none of them are system users and have had no complaints. Would be interested to see if I am doing something wrong though.