[Samba] "Samba cannot handle GPO restrictions"

[Viktor Trojanovic]

Hi list,

Today, I spent most of the day figuring out why my password policies set
via GPO are not applied on a domain level, just to find out that this is
not one of the many occasions where Windows is the problem but it's really
Samba, for a change. Apparently, password policies can only be changed
using samba-tool and not via GPO.

IMO, the FAQ is not very clear here.

https://wiki.samba.org/index.php/FAQ#Is_it_possible_to_set_user_specific_password_policies_in_Samba4_.28e._g._on_a_OU-base.29.3F

It says Samba cannot handle GPO restrictions because they are not saved in
the SysVol volume. But what is a GPO restriction? If I google for "GPO
restrictions", the only results I get are about "Software restrictions
using GPO" which does not seem to be the same.

Can someone therefore please explain to me what exactly these GPO
restrictions are that Samba can't handle? I'd also appreciate if someone
could list which other GPO I cannot set successfully using RSAT.

Cheers,
Viktor