I have 3 DCs run Samba 4.2.3. When I assign some security permissions on object in ADSI edit with option "Apply to: This object and all descendant objects", after replication on other DCs on descendant objects these permisions are lost. Same behavior is when I assign security permissions on OU in ADUC. On other DCs OU has replicated permissions, but on descendant objects permissions are absent.
Because of this, I cannot assign flexible permissions to security group and delegate some non standard functions to this group.
Thanks for any help!
can you test with with a recent 4.11 version, please? I think this should be fixed by now.