Our problem was caused by a domain sid mismatch. Fix:
clone domain sid from source system net getdomainsid to target system net setdomainsid -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
