Hello , I have a issue with office files 2 Samba servers version 4.3.11 compiled from source ( the same problem with sernet samba 4.2 binaries) running as active directory controller but also used as a file server, files frequently open as read-only even if there are opened sessions of them on Samba, at least doesn't appear on smbstatus output , it happens on all Windows machines with any user including administrator, every share have vfs_acl_xattr enabled. I have tried things like disabling file locking on shares but it had no effect . Here is the smb.conf of one of the servers . [global] workgroup = AM realm = AM.LOCAL server string = AM-PDC server role = active directory domain controller passdb backend = samba_dsdb log file = /var/log/samba43/log.%I max log size = 4096 debug prefix timestamp = Yes debug class = Yes time server = Yes load printers = No printcap name = /dev/null disable spoolss = Yes os level = 255 dns forwarder = 172.16.1.1 rpc_server:tcpip = no rpc_daemon:spoolssd = embedded rpc_server:spoolss = embedded rpc_server:winreg = embedded rpc_server:ntsvcs = embedded rpc_server:eventlog = embedded rpc_server:srvsvc = embedded rpc_server:svcctl = embedded rpc_server:default = external winbindd:use external pipes = true idmap config * : backend = tdb printing = bsd map archive = No map readonly = no store dos attributes = Yes oplocks = No level2 oplocks = No strict locking = No vfs objects = dfs_samba4 acl_xattr [netlogon] path = /var/lib/samba43/sysvol/am.local/scripts read only = No browseable = No [sysvol] path = /var/lib/samba43/sysvol read only = No browseable = No [Homedirs] path = /data/samba/homedirs read only = No map acl inherit = Yes browseable = No vfs objects = acl_xattr [Juridico] path = /data/samba/juridico read only = No ea support = Yes map acl inherit = Yes vfs objects = full_audit acl_xattr full_audit:priority = NOTICE full_audit:facility = LOCAL0 full_audit:failure = rmdir rename unlink full_audit:success = rmdir rename unlink full_audit:prefix = "%I|%u|%P" [RH] path = /data/samba/rh read only = No ea support = Yes map acl inherit = Yes vfs objects = full_audit acl_xattr full_audit:priority = NOTICE full_audit:facility = LOCAL0 full_audit:failure = rmdir rename unlink full_audit:success = rmdir rename unlink full_audit:prefix = "%I|%u|%P" [TI] path = /data/samba/ti read only = No ea support = Yes map acl inherit = Yes vfs objects = full_audit acl_xattr full_audit:priority = NOTICE full_audit:facility = LOCAL0 full_audit:failure = rmdir rename unlink full_audit:success = rmdir rename unlink full_audit:prefix = "%I|%u|%P" [Publico] path = /data/samba/publico read only = No ea support = Yes map acl inherit = Yes vfs objects = full_audit acl_xattr full_audit:priority = NOTICE full_audit:facility = LOCAL0 full_audit:failure = rmdir rename unlink full_audit:success = rmdir rename unlink full_audit:prefix = "%I|%u|%P"