Why are Unselected Recipients Appearing When I Add Private Security?
If you make a container Private while you creating it, recipients that you did not select may be added to Recipients. You can remove the unselected recipients by configuring permissions on the container.
When you mark a container Private, permissions inheritance for a container is broken and private permissions are applied. Any groups that previously inherited Deny permissions over the container will stop inheriting those permissions and are automatically added to the recipients list.