I replied to this problem in a different thread. I see you have security = domain. Why not make the security easy (guest ok = yes) in the share in question, just to remove that variable?