[Samba] Windows Application Overriding Samba Settings

[andy liebman]

I have just encountered a strange situation. A new version of a Windows 
application that I use was just released. Unlike previous versions of 
this application, when it writes data to my Samba share, it is setting 
permissions to be 777 on all files and folders. In contrast, previous 
versions of this application set permissions to be 2750 as I specify in 
the "share definition" in my smb.conf file.

In smb.conf, in the share definition I specify:

directory mask = 0750
create mask = 0750

My understanding is that this should LIMIT the maximum permissions that 
can be set for a file or folder created by Windows or a Windows 
application. The file or folder should never be group writable, or even 
accessible by "others".

In addition, I have also played with specifying the following options:

force directory mode = 2040
force create mode = 2040

Until this new version of the Windows application came out, I never had 
any issues. ANY folder or file created by the application always had the 
same permissions:  2750 or 570 (respectively)

But NOW The Windows application seems to be completely getting around 
the limits that I imposed with Samba and Linux. All files and folders 
are getting set as: 0777

I even have the root directory of the share (in which files and folders 
are getting created) set to SGID -- yet Windows is managing to override 
this and is not preserving the SGID on new folders.

Does anybody have a clue what's going on here? How can Windows or a 
Windows Application override my Linux and Samba settings? And is there 
anything I can do about it?

FYI...

In this case I am running Samba 3.0.13.  The Windows version is XP SP2. 
Please don't suggest that I upgrade to Samba 3.0.2x (unless you know 
that it specifically solves this problem). That is not an option at the 
moment.

Thanks in advance for the help.

Andy Liebman