I have 3 DCs run Samba 4.2.1. When I delegate a normal user with specify permissions such as reset password or unlock account, these changes of permissions are not replicated to other DC. I check replicate status with samba-tool drs showrepl and it's OK, but not for security permissions. How can I debug or resolve this problem?
is a support case actually, you might want to consult one of the companies listed at https://www.samba.org/samba/support/ if this is an urgent matter for you.