[Samba] cant login to fileserver

[basti]

hello,
i migrate a NT4 to ad.
User can login with AD username and can connect to share on DC.
When i try to connect to the fileserver via windows i get access denied.

connect from dc1 to fileserver via smbclient does work.

on the fileserver:
- wbinfo -u show user
- wbinfo -P succeeded
- wbinfo -g show groups
- wbinfo -a Administrator succeeded
- pam-auth-update -> kbr, unix, winbind

nsswitch as compad winbind like
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

getent passwd does *not* show domain unsers but thats not the problem i
think.

how can help please?