At some stage we need some support for GPOs which should be applied by a SAMBA 4 DC/Member server. I saw there was a start for a library in one of Jelmer's repos ("libpolicy") or the "libgpo" in the master branch.