Hi, After a migration from samba 3 nt domain to samba 4 AD we have detected that Workstation Logon Restrictions (Log On To) is not working correctly, with samba 3 was working perfect, but after migration we have detected that some resources are not available, for example roaming profiles, home folders... we have tried to add as log on to workstations samba machine (dc), machine that has roaming profiles, home folders.... but without success only works if we disable all restrictions to log on to, but then for our environment is a security problem More information that Andrew Bartlett has described about this issue here: https://lists.samba.org/archive/samba/2016-November/204341.html It will be great to recover this features as It was available with samba 3 NT domain thanks thanks