I get problems with group policies not applied ... seems an older problem surfacing now. Before I debug at current level I consider upgrading the 2 DCs from 4.8.12 (Debian Stretch) to 4.9.9 Anything specific to consider here?