[Samba] cannot set filesystem permissions on shares

[Pisch Tamás]

Hi,

I would like to set filesystem permissions on shares (users, at the
moment) with Windows 10 (1809).
On the Samba side, the filesystem is ext4. I tested the extended
attributes usability with setfattr/getfattr, and setfacl/getfacl, and
they work.
I set the followings in smb.conf:
[global]
vfs objects = acl_xattr
map acl inherit = yes
store dos attributes = yes
...

[users]
path = /home/users
read only = no

And:
chown root:"Domain Admins" /home/users
chmod 0770 /home/users

I gave SeDiskOperatorPrivilege to the Administrator user (I don't
understand, why he doesn't have it default) on dc1, and on the file
server too.

On Windows, I can connect to the Samba file server, with computer
management (it connects immediately, but, when I click on the system
tools, it gives me an error message: SRV cannot connect... When I
click on the ok, it connects after all). I can see shares in Shared
folders/Shares. I can set share permissions, but on the security tab,
I see that I need read permission for the object. When I click on
Special button, the situation is similar: I don't have permission for
the object.
What additional settings I need, what should I check?