I was able to narrow down the issue. I can add groups to the GPO object at
will. The issue only arises when the option "Apply group policy" is
selected. I can even apply it to ONE group, but if I apply it to another
one, the Group Policy Management app silently quits. At this point the Group
Policy Object is corrupted and the only option is to delete it.
I can edit everything in a Group Policy Object except "Apply group
policy"
to a second AD group.
In sum, I cannot create new Group Policy Objects that apply to more than one
group, which is close to useless. This didn't happen before. I upgrade to
Samba 4.21.1 but the issue is still there.