Проблема такова: при открытии документа MS Office на редактирование его параллельно может открыть на редактирование кто угодно. Стандартная блокировка (Уведомить, Только для чтения, Отмена) не работает.
Чего не хватает в конфиге? Уже глаз замылился, похоже...

FreeBSD 6.2-RELEASE
Samba version: 3.0.25a

Конфиг:

[global]
    dos charset = 866
    unix charset = KOI8-R
    display charset = KOI8-R
    workgroup = Work
    server string = Primary Domain Controller (Samba %v)
    interfaces = 192.168.0.0/24, 127.0.0.1
    bind interfaces only = Yes
    passdb backend = ldapsam:ldap://127.0.0.1
    log level = 3
    log file = /var/log/samba/%m.log
    max log size = 1000
    time server = Yes
    max open files = 1000000
    load printers = No
    add user script = /usr/local/sbin/smbldap-useradd -m '%u'
    delete user script = /usr/local/sbin/smbldap-userdel '%u'
    add group script = /usr/local/sbin/smbldap-groupadd '%g'
    delete group script = /usr/local/sbin/smbldap-groupdel '%g'
    add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u' '%g'
    set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u'
    add machine script = /usr/local/sbin/smbldap-useradd -w '%u'
    logon script = start.bat
    logon path = \\geo-samba\profiles\%U
    domain logons = Yes
    os level = 250
    preferred master = Yes
    domain master = Yes
    dns proxy = No
    wins support = Yes
    ldap admin dn =
    ldap group suffix =
    ldap idmap suffix =
    ldap machine suffix =
    ldap suffix =
    ldap ssl = no
    ldap user suffix =
    idmap uid = 10000-20000
    idmap gid = 10000-20000
    winbind cache time = 1200
    winbind use default domain = Yes
    winbind trusted domains only = Yes
    admin users = root
    acl group control = Yes
    acl map full control = No
    force create mode = 0755
    force directory mode = 06755
    hosts allow = 127.0.0.1, 192.168.0.0/24
    hosts deny = all
    profile acls = Yes
    map acl inherit = Yes
    browseable = No

[it]
    comment = IT
    path = /usr/local/domain/it
    invalid users = "@Domain Users"
    valid users = "@IT Dep", @wheel, root\
    admin users = root, "@IT Dep"
    read only = No
    create mask = 0766
    force create mode = 0766
    force directory mode = 06777
    inherit acls = Yes
    browseable = Yes
    vfs objects = recycle
    recycle:exclude = *.tmp|*.tbi|*.temp|~$*|*.~??
    recycle:maxsize = 0
    recycle:versions = Yes
    recycle:touch = Yes
    recycle:keeptree = Yes
    recycle:repository = .???