I created a group in ldap: dn: cn=web,ou=Group,dc=mdah,dc=state,dc=ms,dc=us objectClass: posixGroup objectClass: top cn: web userPassword:: xxxxxxxxxx memberUid: akazery memberUid: dhglover memberUid: cgoodwin memberUid: mglover memberUid: jlongmire memberUid: awilliam gidNumber: 1010 and ran: net groupmap add rid=3021 ntgroup="Website" unixgroup=web type=d and in smb.conf had: [web] path = /var/www/sites public = no writeable = yes create mode = 0664 directory mode = 0775 force group = web valid users = @"ADMIN\Website" csc policy = disable profile acls = yes nt acl support = no but my users still couldn't access the share. However, when I changed the line to valid users = @"ADMIN\Web" then they could access the share fine. shouldn't the group name ADMIN\Website worked fine since I did the net groupmap add command?