[Samba] smb won't allow users from other ou share access

[Fuhriman, Nathanael [US] (SP) (Contr)]

I have samba setup to share files on a system using SSSD hooked to AD for user accounts. Some users are able to access the shares and other are not. I finally narrowed it down to users that are in a specific OU in AD. Those in that OU can access the shares. All others are denied access. For examples users in OU=employees are able to access but users in OU=contractors are not able to access.

I'm pretty sure the problem is with samba because the users are all able to login with ssh so the system in general knows about the user/passwords.

I've tried looking through the smb.conf man page and I'm not seeing anything about where it cares about which ou a user is in.

This is on RHEL7.9 with samba 4.10.16