samba - Apr 2019 - GPO Filtering Denied

I followed Part 1, Part 3, and Part 4 at this url

https://www.tecmint.com/install-samba4-active-directory-ubuntu/

Domain Controller is Fedora 29 with samba-dc-4.9.6-0 installed, the other 
Windows 10 Pro version 1809 with RSAT installed.

The Domain Controller is named dcprimary.  I am connected to the domain 
from the Windows named wks2.

In part 4 it steps through configuring a logon banner.  I do this and 
force an update.  The output from the command 'gpresult /z' is below.

I did find this url in the archives, but found no answer.  I found many 
others, also no resolution.  It seems I have addressed everything yet I 
get Filtering denied.

https://lists.samba.org/archive/samba/2018-August/217667.html

I wanted to include the export of 'Logon Banner' report (from Part 4),
but
it made the email too large in size.


=== gpresult ==
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
c 2018 Microsoft Corporation. All rights reserved.

Created on ?4/?18/?2019 at 2:31:29 PM



---------------------------------------------------------------

OS Configuration:            Member Workstation
OS Version:                  10.0.17763
Site Name:                   Default-First-Site-Name
Roaming Profile:             N/A
Local Profile:               C:\Users\Administrator
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=WKS2,CN=Computers,DC=mydomain,DC=com
    Last time Group Policy was applied: 4/18/2019 at 2:03:08 PM
    Group Policy was applied from:      dcprimary.mydomain.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        MYDOMAIN
    Domain Type:                        Windows 2008 or later

    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Logon Banner
            Filtering:  Denied (Security)

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Default Domain Policy
            Filtering:  Denied (Security)

    The computer is a part of the following security groups
    -------------------------------------------------------
        NULL SID
        NT AUTHORITY\NETWORK
        This Organization
        Untrusted Mandatory Level
 

USER SETTINGS
--------------
    CN=Administrator,CN=Users,DC=mydomain,DC=com
    Last time Group Policy was applied: 4/18/2019 at 2:03:09 PM
    Group Policy was applied from:      dcprimary.mydomain.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        MYDOMAIN
    Domain Type:                        Windows 2008 or later
 
    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

        Default Domain Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        BUILTIN\Administrators
        REMOTE INTERACTIVE LOGON
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Domain Admins
        Denied RODC Password Replication Group
        Schema Admins
        Enterprise Admins
        Group Policy Creator Owners
        High Mandatory Level

On Fri, 19 Apr 2019 08:00:32 -0600
Durwin via samba <samba at lists.samba.org> wrote:
> I followed Part 1, Part 3, and Part 4 at this url
> 
> https://www.tecmint.com/install-samba4-active-directory-ubuntu/
> 
> Domain Controller is Fedora 29 with samba-dc-4.9.6-0 installed, the
> other Windows 10 Pro version 1809 with RSAT installed.
Would these be the default Fedora Samba packages ? using MIT ?

If so, then stop, these packages are classed as experimental and you
may have found another reason not to use them.

Rowland

> From: Rowland Penny via samba <samba at lists.samba.org>
> To: samba at lists.samba.org
> Date: 04/19/2019 08:29 AM
> Subject: Re: [Samba] GPO Filtering Denied
> Sent by: "samba" <samba-bounces at lists.samba.org>
> 
> On Fri, 19 Apr 2019 08:00:32 -0600
> Durwin via samba <samba at lists.samba.org> wrote:
> 
> > I followed Part 1, Part 3, and Part 4 at this url
> > 
> > https://www.tecmint.com/install-samba4-active-directory-ubuntu/
> > 
> > Domain Controller is Fedora 29 with samba-dc-4.9.6-0 installed, the
> > other Windows 10 Pro version 1809 with RSAT installed.
> 
> Would these be the default Fedora Samba packages ? using MIT ?
Yes, I am using default packages from Fedora 29.  What is MIT?

What are my other choices?  Compile from source?


Thank you
> 
> If so, then stop, these packages are classed as experimental and you
> may have found another reason not to use them.
> 
> Rowland
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba


This email message and any attachments are for the sole use of the 
intended recipient(s) and may contain proprietary and/or confidential 
information which may be privileged or otherwise protected from 
disclosure. Any unauthorized review, use, disclosure or distribution is 
prohibited. If you are not the intended recipient(s), please contact the 
sender by reply email and destroy the original message and any copies of 
the message as well as any attachments to the original message.