"ad_gpo_access_control = enforcing" in sssd.conf works fails constantly on RHEL 7.2 servers

Issue

GPO based access control fails on a RHEL 7.2 server with the following in the debug log:

sssd_example.com.log:(Wed Jul 20 08:19:21 2016) [sssd[be[example.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_server: smb://server.example.com
sssd_example.com.log:(Wed Jul 20 08:19:21 2016) [sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): GPO-based access control failed.

sssd_example.com.log:(Wed Jul 20 09:50:33 2016) [sssd[be[example.com]]] [ad_gpo_sd_process_attrs] (0x4000): smb_server: smb://server.example.com
sssd_rba.gov.au.log:(Wed Jul 20 09:50:33 2016) [sssd[be[example.com]]] [ad_gpo_access_done] (0x0040): GPO-based access control failed.