When enabled, this option causes Samba (acting as an Active Directory Domain Controller) to stream group membership change events across the internal message bus. Scripts built using Samba's python bindings can listen to these events by registering as the service dsdb_group_event.
This should be considered a developer option (it assists in the Samba testsuite) rather than a facility for external auditing, as message delivery is not guaranteed (a feature that the testsuite works around).
The group events are also logged via the normal logging methods when the is set appropriately.
|Registry Path||Software\Policies\Samba\smb_conf\dsdb group change notification|
|Value Name||dsdb group change notification|