Everything works fine in doing this, however every time a user logs into the Windows Citrix Session the roaming profile created on the linux samba share creates their Windows Profile with a 755 perms. I understand that the default umask is (globally on my RHEL host is 022 ??) but in my smb.conf file the definition that is defined for the directory is set to a create mask of 0700. What is going on?

Thanks in advance!

Greg

Can you post result of testparm command ?

testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
WARNING: The "printer admin" option is deprecated
Processing section "[print$]"
Processing section "[jde_phase_e810]"
Processing section "[DXpress]"
Processing section "[jdeftp]"
Processing section "[jde_phase_II]"
Processing section "[citrix_profiles]"
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
[global]
dos charset = ASCII
unix charset = UTF8
display charset = UTF8
workgroup = KEYSTONE
realm = KEYSTONE.KFC
server string = DISTRIBUTION (CUPS) Server
security = ADS
allow trusted domains = No
password server = 205.223.6.15 205.223.6.16 205.223.5.131 205.223.5.132
passdb backend = tdbsam
restrict anonymous = 2
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
log level = 4
log file = /var/log/samba/%m.log
max log size = 50
unix extensions = No
printcap name = cups
os level = 33
preferred master = No
local master = No
wins proxy = Yes
wins server = 205.223.6.15
idmap domains = KEYSTONE
idmap uid = 15000-78000000
idmap gid = 15000-78000000
template shell = /bin/bash
winbind separator = +
winbind enum users = Yes
winbind enum groups = Yes
winbind:ignore domains = ROOT KFCTEST KEYSTONEUK FRANCE
idmap config KEYSTONE:range = 15000-78000000
idmap config KEYSTONE:backend = rid
cups options = raw
[citrix_profiles]
comment = JDEdwards Citrix Profiles
path = /profiles/CTX_Profiles
valid users = "@KEYSTONE+domain users", KEYSTONE+jde, "@KEYSTONE+it administrators", @KEYSTONE+jdeoneworldusers
read only = No
create mask = 0777
csc policy = disable

700 means only owner has full permission if you want to give rwx permission to group set it to 770 never set it to 777
create mask is used for files and directory mask is used to set directory permission.

HTH
Regards,