[Samba] editing samba-share ACLs etc from Windows

[Stefan G. Weichinger]

Trying to edit the permissions of samba-4.5.x from a Windows server 
management console.

Getting "no access" as domain admin.

Does that relate to that security policy issue back then (accessing the 
shares also doesn't work)?

I need to deny a specific AD user group access to samba-shares and as 
far as I know editing the ACLs and/or share permissions from Windows is 
the recommended way.

Any recommendations here?

thanks in advance, Stefan