Hello, Windows Server 2016 apparently has a temporary group membership feature - http://woshub.com/temporary-membership-in-active-directory-groups/. Does Samba have support for this? If not, is anyone aware of an alternative way to achieve the same goal? I can see using existing tools for programmatically adding users to groups, but I anticipate problems with revoking group membership in the middle of a user's session. As the article says, the kerberos ticket needs to time out and I'm not sure how I'd do that. -- Mason