Is there any wrong with my smb.conf ?

[nubie]

Hi all sorry for disturb your time, just need a favor to ask bout my smb.conf, please
check it out:

# smb.conf is the main Samba configuration file. You find a full commented
# version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the
# samba-doc package is installed.
# Date: 2006-11-27
[global]
   workgroup = WORKGROUP
   printing = cups
   printcap name = cups
   printcap cache time = 750
   cups options = raw
   map to guest = Bad User
   include = /etc/samba/dhcp.conf
   logon path = \\%L\profiles\.msprofile
   logon home = \\%L\%U\.9xprofile
   logon drive = P:
   usershare allow guests = Yes
  add machine script = /usr/sbin/ useradd -c Machine -d /var/lib/nobody -s /bin/false%m$
  domain master = No
  domain logons = No
  security = user
  passdb backend = smbpasswd
[homes]
   comment = Home Directories
   valid users = %S, %D%w%S
   browseable = No
   read only = Yes
   inherit acls = Yes
[profiles]
   comment = Network Profiles Service
   path = %H
   read only = No
   store dos attributes = Yes
   create mask = 0600
   directory mask = 0700
[users]
   comment = All users
   path = /DataSamba
   read only = No
   inherit acls = Yes
   veto files = /aquota.user/groups/shares/
[groups]
   comment = All groups
   path = /DataSamba/groups
   read only = No
   inherit acls = Yes
[printers]
   comment = All Printers
   path = /var/tmp
   printable = Yes
   create mask = 0600
   browseable = No
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/drivers
   write list = @ntadmin root
   force group = ntadmin
   create mask = 0664
   directory mask = 0775
[DataSamba]
        comment = Data Samba
        path = /DataSamba
        valid users = %S, %D%w%S
        browseable = No
        read only = Yes
        inherit acls = Yes
[engineering]
       comment = Data engineering
       path = /DataSamba/engineering
       valid users = %S, %D%w%S
       browseable = Yes
       read only = No
       inherit acls = Yes
       create mask = 0750
       force create mode = 010
       directory mask = 0770

frm that smb.conf the create mask and directory mask for every new file or folder
that created by privileged user for folder "engineering" not exactly like i set on create mask, force create mode, directory mask. But i before use this smb.conf on my office i had try this smb.conf on my lab home and it works perfectly for me.
And also i had try adding :
force create mode = 0750
force directory mode = 0770
force group = Engineering
but it not work the file that new create always have default permission 0744
and 0755 for folder/directory.

Thank's a lot for your kind help and please advice,

[rcgreen]

If the permissions on the actual directories are more strict,
the more strict rule will apply.

[nubie]

Thanks for your reply rcgreen, can you explain to me about the meaning "the more strict rule will apply" cause i think permission in actual directory must i change the permission because user on that directory want their group can save new file, edit, create new folder, save new file on that new folder by other member group.

thank's again for your help.

[rcgreen]

I am not an expert on permissions, but I know that people are always
reminding new samba administrators to remember that you must allow
the same permissions on the actual directories as you are putting
into the samba configuration. It is a common hang up.

[nubie]

thank's rcgreen for your quick reply, as you can see on my smb.conf can you give
me some advice about it or there is something wrong that i put on my smb.conf cause from my smb.conf the permission set on smb.conf not work and the actual directory i had been change the permission same as that user wanted 0750.

Thank's again rcgreen.