I believe there is no use of "-h" option after username. # /usr/local/samba/bin/samba-tool gpo list test-user-4 GPOs for user test-user-4 Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9} There seems to be no significance of "--password", "--ipaddress" after username or I am missing something! GPOs can be retrieved just by "samba-tool gpo list test-user-4". I believe there stands no use for other options afterwards! # /usr/local/samba/bin/samba-tool gpo list test-user-4 -h Usage: samba-tool gpo list <username> [options] List GPOs for an account. Options: -h, --help show this help message and exit -H URL, --URL=URL LDB URL for database or target server Credentials Options: --simple-bind-dn=DN DN to use for a simple bind --password=PASSWORD Password -U USERNAME, --username=USERNAME Username -W WORKGROUP, --workgroup=WORKGROUP Workgroup -N, --no-pass Don't ask for a password -k KERBEROS, --kerberos=KERBEROS Use Kerberos --ipaddress=IPADDRESS IP address of server -P, --machine-pass Use stored machine account password --krb5-ccache=KRB5CCNAME Kerberos Credentials cache Samba Common Options: -s FILE, --configfile=FILE Configuration file -d DEBUGLEVEL, --debuglevel=DEBUGLEVEL debug level --option=OPTION set smb.conf option from command line --realm=REALM set the realm name Version Options: -V, --version Display version number