I work for a large organization with a large Active Directory forrest that has multiple child domains. On my Linux server I was running samba 2.2.8 - with domain authenticaion - joined to our child domain. Users were able to use their child domain Windows accounts, or if they didn't have one, the top level Windows domain accounts to access the samba server.

Today I upgraded to SAMBA 3.0 and (re)joined it to our child domain. I modified the smb.conf file to use ADS security and to use the DNS domain name of our child domain as the realm. Since implementing this, only users with a child domain windows account can connect - no one from the top level domain can access the server. I am perplexed and have had no success in solving this. Any suggestions?