[Samba] W2K Sp2 in NT4 domain and roaming profiles on samba 2.2.3a

[Rene Lenga]

Hello samba-insiders,

we have a WinNT 4.0 SP5 PDC and our samba 2.2.3a is member of the domain.
The roaming profiles of our clients stored on the samba 2.2.3a server.
All seams to be perfect but only clients with W2K SP2 cannot use there
roaming profiles.

---> "Access Denyed" is the W2K errro message.

But if the same user loggs on on a client machine with W2K SP1 all things
are ok.

In the log.smb file I found the following error message:
[2002/03/05 11:34:42, 0] smbd/posix_acls.c:create_canon_ace_lists(762)
create_canon_ace_lists: unable to map SID
S-1-5-21-1482442952-1152601475-1307212239-1097 to uid or gid.

This is the smb.conf:
# Samba config file created using SWAT
# Date: 2002/02/25 20:41:29

# Global parameters
[global]
        workgroup = ATACAMA
        netbios name = ATACAMA02
        security = DOMAIN
        encrypt passwords = Yes
        password server = ATACAMA01
        username map = /usr/local/samba/lib/usermap.txt
        deadtime = 15
        character set = ISO8859-1
        wins server = 192.168.1.1
        invalid users = root admin bin
        create mask = 0770
        directory mask = 0770
        mangled names = No

[profiles]
        path = /usr/z_atacama_data/profiles
        read only = No
        browseable = No

[LW1]
        comment = allgemeine Daten
        path = /usr/z_atacama_data/lw1
        valid users = @domaene
        read only = No

Is there a solution?
I'm only a stupid beginner using samba.