smb.conf GPO issue

cat /etc/samba/smb.conf
# Global parameters
[global]
	workgroup = AD
	realm = AD.KMNR.ORG
	netbios name = AUTH1
	server role = active directory domain controller
	dns forwarder = 192.168.2.20
	allow dns updates = nonsecure
	idmap_ldb:use rfc2307 = yes
	log level = 3
	tls enabled  = yes
	tls keyfile  = tls/myKey.pem
	tls certfile = tls/auth1.brewerscience.com.crt
	tls cafile   = tls/bsica.crt

[netlogon]
	path = /var/lib/samba/sysvol/ad.kmnr.org/scripts
	read only = No

[sysvol]
	path = /var/lib/samba/sysvol
	read only = No