I created a group in ldap:
dn: cn=web,ou=Group,dc=mdah,dc=state,dc=ms,dc=us
objectClass: posixGroup
objectClass: top
cn: web
userPassword:: xxxxxxxxxx
memberUid: akazery
memberUid: dhglover
memberUid: cgoodwin
memberUid: mglover
memberUid: jlongmire
memberUid: awilliam
gidNumber: 1010
and ran:
net groupmap add rid=3021 ntgroup="Website" unixgroup=web type=d
and in smb.conf had:
[web]
        path = /var/www/sites
        public = no
        writeable = yes
        create mode = 0664
        directory mode = 0775
        force group = web
        valid users = @"ADMIN\Website"
        csc policy = disable
        profile acls = yes
        nt acl support = no
but my users still couldn't access the share.  However, when I changed 
the line to valid users = @"ADMIN\Web" then they could access the
share
fine.  shouldn't the group name ADMIN\Website worked fine since I did 
the net groupmap add command?