[Samba] Debian 10 Samba 4.14.4 No acces to SYSVOL and NETLOGON from Windows 10

[Mueller]

Dear all,
after a lot of learning I succeded with debian 10 and samba 4.14.4
ntp and bind9_dlz is working,
The only issue is "SYSVOL" and "NETLOGON"
When I try to logon from my Windows 10 domainmembers to both shares I get no
connection 
Only logon from within my debian 10 host works:

SYSVOL
root at dom:/var/lib/samba/private# smbclient //dom.plk.loc/sysvol
-UAdministrator
Enter PLK\Administrator's password:
Try "help" to get a list of possible commands.
smb: \>
root at dom:/var/lib/samba/private# smbclient //localhost/sysvol
-UAdministrator
Enter PLK\Administrator's password:
Try "help" to get a list of possible commands.
smb: \>

NETLOGON
root at dom:/var/lib/samba/private# smbclient //localhost/netlogon
-UAdministrator
Enter PLK\Administrator's password:
Try "help" to get a list of possible commands.
smb: \>

root at dom:/var/lib/samba# getfacl  /var/lib/samba/sysvol
getfacl: Entferne führende '/' von absoluten Pfadnamen
# file: var/lib/samba/sysvol
# owner: root
# group: 3000000
user::rwx
user:root:rwx
user:3000000:rwx
user:3000001:r-x
user:3000002:rwx
user:3000003:r-x
user:3000004:rwx
group::rwx
group:3000000:rwx
group:3000001:r-x
group:3000002:rwx
group:3000003:r-x
group:3000004:rwx
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:user:3000000:rwx
default:user:3000001:r-x
default:user:3000002:rwx
default:user:3000003:r-x
default:user:3000004:rwx
default:group::---
default:group:3000000:rwx
default:group:3000001:r-x
default:group:3000002:rwx
default:group:3000003:r-x
default:group:3000004:rwx
default:mask::rwx
default:other::---

root at dom:/var/lib/samba# getfacl  /var/lib/samba/sysvol/plk.loc/scripts
getfacl: Entferne führende '/' von absoluten Pfadnamen
# file: var/lib/samba/sysvol/plk.loc/scripts
# owner: root
# group: 3000000
user::rwx
user:root:rwx
user:3000000:rwx
user:3000001:r-x
user:3000002:rwx
user:3000003:r-x
group::rwx
group:3000000:rwx
group:3000001:r-x
group:3000002:rwx
group:3000003:r-x
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:user:3000000:rwx
default:user:3000001:r-x
default:user:3000002:rwx
default:user:3000003:r-x
default:group::---
default:group:3000000:rwx
default:group:3000001:r-x
default:group:3000002:rwx
default:group:3000003:r-x
default:mask::rwx
default:other::---


How can I fix this?

Greetings
Daniel