[domain/ad.holding.com]
...
ad_gpo_access_control = disabled