winbind nested groups

If set to yes, this parameter activates the support for nested
groups. Nested groups are also called local groups or
aliases. They work like their counterparts in Windows: Nested
groups are defined locally on any machine (they are shared
between DC's through their SAM) and can contain users and
global groups from any trusted SAM. To be able to use nested
groups, you need to run nss_winbind.

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

winbind nested groups
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Samba\smb_conf\winbind nested groups
Value Namewinbind nested groups
Value TypeREG_DWORD
Default Value1
True Value1
False Value0

samba.admx

Administrative Templates (Computers)