Given I have a user John DOE with "domain guests" primary group. With samba < 4.3.9, John can access to sysvol or netlogon share, GPO are applied. With samba 4.3.9, John have can't access to sysvol or netlogon (access refused) and no users's GPO are applied at logon. I need to add "guest ok = yes" under netlogon and sysvol share in smb.conf