Now i have something, this diag howto is excellent: /usr/share/doc/samba-version/docs/textdocs/DIAGNOSIS.txt

Here is what's working:
1. testparm smb.conf give me no error
2. I can ping smbservername from my workstation
3. I can get a list of available shares from my unix box with:
smbclient -L smbservername
4. My nmbd demon is correctly installed, i can get back the ip of my server when i issue:
nmblookup -B smbservername
5. I can communicate from the server to the client cause i get the ip address back when i issue:
nmblookup -B clientname '*'
6. Broadcast from server works cause i get ip from surrounding stations when i issue:
nmblookup -d 2 '*'
7a. i have proper share setup because i can access it from the server itself with
smbclient //smbservername/sharedfolder

7b. i can even access it from a username i was suspecting problems with:
smbclient //smbservername/sharedfolder -U username

8. PROBLEM: i can't view the shares from the workstation i use
i open a cmd window from my XP box and i try:
net view \\smbservername
i get system error 5, access denied
witch is not explained in DIAGNOSIS.txt

add this to the [global] section and make the test 8:

nt acl support = no

remember restart samba

same problem: 'access denied'

i believe that the denied access is oriented towards the PC itself not the user because step 7b did work fine.

Going back in our discussion, i focus on create machine trust accounts (this is to give trusts to a PC isn't it?)

A) /usr/sbin useradd -g is_the_group_in_witch_users_belong -d /dev/null -c is_the_PC_name_of_the_workstation -s /bin/false PC_name_of_that_workstation$

this replies with:
useradd : gui 100 unknown
useradd : user x already exist

B) passwd -l workstation_PCname$
passwd: Success

C) smbpasswd -a -m workstation_PCname
Password chanded for workstation_PCname$

sorry in step A, instead of:
useradd : gui 100 unknown

you shoud read:
useradd : gid 100 unknown

use: groupadd -g 100 name_of_the_group

groupadd : the group workstations already exists

I installed a new redhat 8 with samba like PDC, using the smb.conf file that posted you and works fine, i just must to change the pass for the root user in samba with smbpasswd.

when I try to join the domain from the clients (win2k) I use the account root with its new password in samba.

I can't make probes with winxp because I don't have xp clients.

Try the patch for winxp, I think is all you problem

what is the difference between machine nickname and machine_name$ ???

can i type:
/usr/sbin/useradd -g 100 -d /dev/null -c xpws1 -s /bin/false xpws1$

/usr/bin/useradd -g 100 -d /dev/null -c "description" account$

-g 100 <- gruop id 100 to add the account
-d /dev/null <- work directory, null in this case
-c "description of the account" <- only a description
account$ <- username to add, in this case account$ is for a machine account

IT WORKS...
believe it or not, it works... and it might have been working since a while.
If i use network neibourhood i see two workgroups: workgroup (xp) and domain.local (samba), by clicing on it i can browse and access files on the samba server.
What is strange is that i never join the domain neither can i joint it by using the My Computer Icon > Properties > Computer Name > Change > Domain
i always get an denied access
i used net use and i got in
i went back to network neighborhood and i can browse.
well i didn't change anything from that patch since it was correct from higher in the post.

I am very curious to find out why i can't join the domain, it seems like it concidered it as a workgroup and not a domain.

great, at last, try changind the root pass with smbpasswd, and joint the domain with user root an your new pass, reboot xp and enjoy

well, it doesn't want to do it...
i convert the user root but it still doesn't want to login in My Computer Icon > Properties > Computer Name > Change > Domain
I have an unknown user or incorrect password
in gui or cmd line it's the same. :-(

are you adding the winxp netbios name like machine account plus $ in your linux box?

Yes i do

sorry, but I don't know what more to do