Hi, After enable display information about previous logons on the default domain policy, no one can logon the samba4 domain. How can I disable it by ldap modify or just reset to the default domain policy (if we are unlucky) ? -- Dongsheng