The public=yes parameter tells samba to map to the unix guest user - since your security mode is ADS, you may have to specify which ADS user to use as Guest.