My experience is that if you set Windows ACLs, Samba will try to create Linux ACLs that resemble the Windows ACLs as closely as possible, but only local users will feel them. Users who access the files via Samba will only feel the Windows ACLs. So you can simply ignore the output of getfacl.