Hi Donald,
I have the same issue.
(Mon May 22 16:35:35 2017) [sssd[be[unix.example.com]]] [ad_gpo_populate_candidate_gpos]
(0x0400): candidate_gpos[171]->gpo_dn:
cn={E94CC8A3-7FAA-44B5-BEF9-4BFADF72C41A},cn=policies,cn=system,DC=unix,DC=example,DC=com
(Mon May 22 16:35:35 2017) [sssd[be[unix.example.com]]] [ad_gpo_populate_candidate_gpos]
(0x0400): candidate_gpos[172]->gpo_dn:
cn={7B18B4F3-4388-4981-8830-45D3BD78C38F},cn=policies,cn=system,DC=unix,DC=example,DC=com
(Mon May 22 16:35:35 2017) [sssd[be[unix.example.com]]] [ad_gpo_populate_candidate_gpos]
(0x0400): candidate_gpos[173]->gpo_dn:
cn={D56308B7-2ACA-4677-900E-745477B7FAF6},cn=policies,cn=system,DC=unix,DC=example,DC=com
(Mon May 22 16:35:35 2017) [sssd[be[unix.example.com]]] [ad_gpo_process_gpo_done]
(0x0400): No GPOs found that apply to this system.
(Mon May 22 16:35:35 2017) [sssd[be[unix.example.com]]] [ad_gpo_access_done] (0x0400):
GPO-based access control successful.
I wanted to check how you granted permissions to other candidate gpo's. We have a OU
with bunch of servers and multiple gpo's. Each GPO is applied to a group of servers
using security filtering section in scope of GPO.
Is every Linux server needs read access to all GPO's? In this case do I need to add
all Linux servers to all GPO's in security filtering section so they can get read
access to all GPO's?
If it is like that how can we apply particular GPO to only a set of servers, I need to
Limit each application group of users to their respective server.
Thanks in Advance.
Krishna.