[Samba] samba4 as ADS member: some users visible, others not

[Stefan G. Weichinger]

Can someone point me at how the machine account plays into permitting
access here?

[it]
	path = /mnt/data/samba/data/it
	valid users = CUSTOMER\sgw CUSTOMER\fhäu @CUSTOMER\edv
	read only = No
	browseable = No

A user out of the group "edv" uses the PC "p10013". Sometimes he gets
access, sometimes not.

Logs show:

(a)

check_ntlm_password:  authentication for user [P10013$] -> [P10013$] ->
[LIETZ\p10013$] succeeded
  user 'LIETZ\p10013$' (from session setup) not permitted to access this
share (it)

(b)

p10013 (ipv4:10.1.9.169:54684) connect to service it initially as user
CUSTOMER\xy