[Samba] Enabling recycle vfs in [global] on an AD DC disables creation of GPO's

[Sebastian Arcus]

As per my other post, enabling the recycle vfs module in the [global] 
section of smb.conf on a Samba AD DC kills the ability to create GPO's 
through RSAT with the error message:

"This security ID may not be assigned as the owner of this object"

It probably affects other things as well on the AD DC. I've searched 
through Samba.org and googled in general, and couldn't find any clear 
info as to if recycle vfs should or shouldn't be configured in [global]. 
For me it has certainly worked fine in [global] for years, with Samba as 
NT DC.

Could the information above be added in the wiki or documentation 
somewhere - to save others some head scratching, please.