[Samba] Winbind Issues

[sysrm]

Hi all, 

Been having issues trying to get winbind working properly.

Basically I need windows Domain controller features such as forcing bad
password attempts and group policy etc and use samba as the FileStore.

I can kinit nps, I can join the samba machine to the AD (shows up on the
windows box too)

But when I run wbinfo -u I get ;
[root at dev1 bin]# ./wbinfo -u
Error looking up domain users

Also 

[root at dev1 bin]# ./wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_INTERNAL_ERROR (0xc00000e5)
Could not check secret

Ive tried latest versions, starting over etc, reading so many google and
howto documents and still nothing.

What should I be checking for or looking to modify?

Ive changed the /etc/nsswitch.conf so that the passwd: shadow: etc has
winbind.

Any help gratefully received.

Ross