I just reverted to Samba 4.19.8 and this issue is gone. It definitely started with version 4.20. > In sum, I cannot create new Group Policy Objects that apply to more than one > group, which is close to useless. This didn't happen before. I upgrade to > Samba 4.21.1 but the issue is still there.