[Samba] GPO permissions

[Kris Lou]

>
>
> I'm trying to track down why some GPOs are essentially invisible to the
> clients, even though they exist in GPM and the files exist.  So, they
> aren't being applied or denied.
>

Replying to myself:

The above seems to be related to both User and Computer GPO's being pulled
down by the Computer's context.  As such, the Domain Computers (or
Authenticated Users) need to have Read access to the GPO on the Delegation
tab.  Otherwise, it's "essentially invisible."

https://community.spiceworks.com/topic/1706100-group-policy-won-t-apply-without-authenticated-users?page=1#entry-5985648