samba - Apr 2003 - NT_STATUS_INVALID_WORKSTATION and SAM.workstation-restrictions

hello,

on one larger domain-member-setup i'm currently facing the annoying
NT_STATUS_INVALID_WORKSTATION error-messages, caused by user specific 
workstation-restrictions that prevent users from attaching shares on that
domain-member server (2.2.8a with winbind).

is there any workaround except for adding my samba-domain-member
netbios-name to each user's "userWorkstations"-list in ads?

is password-validation via smbd/winbindd recognized as a user logon at the
domain controller or what else causes the domain controller to send
NT_STATUS_INVALID_WORKSTATION?

any hint is greatly appreciated.

thanks,
guenther
-- 
Guenther Deschner                                         gd@suse.de
SuSE Linux AG                                        GnuPG: 8EE11688
Berliner Str. 27                      phone:  +49 (0) 30 / 430944778
D-13507 Berlin                           fax:  +49 (0) 30 / 43732804
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20030428/778e7994/attachment.bin

Skipped content of type multipart/mixed-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20030430/dd87a5ea/attachment.bin