[Samba] Problem adding W2K to Samba/LDAP PDC

[samba3 at mailgate.ru]

Hi, 

I'm trying to add W2K workstation into Samba3 domain and get a message: 'username or password is incorrect'
(or smth similar, my w2k is localized).

1. login is root, password is correct (i can access shared folders).
2. I use pure ldapsam passdb backend
3. I added user root to ldap and changed his uidNumber to 0
4. I joined user root to group Admins
5. root sambaSID is: S-1-5-21-1036508587-608570407-1912796235-500
6. root sambaPrimaryGroupSID is: S-1-5-21-1036508587-608570407-1912796235-512
7: Admins sambaSID is: S-1-5-21-1036508587-608570407-1912796235-512
8: net getlocalsid output: SID for domain ZYXEL is: S-1-5-21-1036508587-608570407-1912796235
9: I added machine account to LDAP.

Problem with root's username/password doesn't occur when 
   passdb backend = smbpasswd ldapsam,
because I have a root account in smbpasswd with uid 0, but in this case samba adds workstations into smbpasswd!!!
(despite the EXISTING machine account in LDAP).
well, smbpasswd is not a problem, i'm  just going to use ldap anyway

Please help, I'm getting mad trying to build my domain back.
Any hints appreciated.
TIA