samba - Feb 2006 - Users get their roaming profiles read only!

Hi, I've read all the docs I could and still can't find the sollution to
this problem.

Problem: All the files in the users' profile are set to
"read-only".
Consecuences: When logging out and back in programs stop working or have 
trouble accessing their own settings. E.g. Java WebStart stops working, 
Google Earth gives an error, etc.

Relevant config settings:

[global]
        workgroup = MYDOMAIN
        security = user
        logon path = \\%N\profiles\%U
        domain logons = Yes
        preferred master = Yes
        domain master = Yes
        ea support = Yes
        map acl inherit = Yes
        map archive = No
        map hidden = No
        map system = No
        store dos attributes = Yes

[profiles]
        path = /var/lib/profiles
        read only = No
        create mask = 0644
        profile acls = Yes
        veto oplock files = /prf.*.tmp/
        browseable = No
        csc policy = disable
        hide files = /desktop.ini/

What can I do to fix this issue?

Thanks!