I am running samba-3.0.10-1 on Fedora core 3 compiled with ACL support. I can connect to shares as expected, users in the correct Active Directory groups have access, and the converse. However when I manage the samba server through Windows XP MMC and attempt to change permissions on the security tab of the finance share I get "Access is Denied". Anyone know what I am doing wrong? I removed my level 3 debug attachment due to it's length. TIA, Steve O'Brien My smb.conf looks like: [global] workgroup = DOMAIN netbios name = FC3 realm = DOMAIN.COM security = ADS auth methods = winbind socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 password server = dc.domain.com use spnego = yes wins server = 192.168.19.35 winbind separator = \\ encrypt passwords = yes printcap name = cups disable spoolss = Yes show add printer wizard = No idmap uid = 15000-20000 idmap gid = 15000-20000 winbind use default domain = yes use sendfile = Yes printing = cups winbind enum users = yes winbind enum groups = yes log level = 3 admin users = @"Domain Admins" [finance] comment = finance dept path = /home/finance valid users = @Finance browseable = yes nt acl support = yes force group = Finance admin users = @"Domain Admins" My fstab for my /home slice looks like: /dev/VolGroup00/LogVol04 /home ext3 acl 1 2 ldd smbd yields: libldap-2.2.so.7 => /usr/lib/libldap-2.2.so.7 (0x00df5000) liblber-2.2.so.7 => /usr/lib/liblber-2.2.so.7 (0x00111000) libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x0011d000) libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x004ff000) libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00d37000) libcom_err.so.2 => /lib/libcom_err.so.2 (0x00131000) libresolv.so.2 => /lib/libresolv.so.2 (0x00ab2000) libcups.so.2 => /usr/lib/libcups.so.2 (0x00e57000) libssl.so.4 => /lib/libssl.so.4 (0x00f9a000) libcrypto.so.4 => /lib/libcrypto.so.4 (0x0034c000) libnsl.so.1 => /lib/libnsl.so.1 (0x00317000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x00973000) libpam.so.0 => /lib/libpam.so.0 (0x00134000) libattr.so.1 => /lib/libattr.so.1 (0x0020a000) libacl.so.1 => /lib/libacl.so.1 (0x0013c000) libdl.so.2 => /lib/libdl.so.2 (0x00b7b000) libpopt.so.0 => /usr/lib/libpopt.so.0 (0x00142000) libc.so.6 => /lib/tls/libc.so.6 (0x00b7f000) libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00149000) libz.so.1 => /usr/lib/libz.so.1 (0x0015d000) /lib/ld-linux.so.2 (0x00b38000)