Did you test with the PDC option in the DSS just to verify that the users can actually see the shares?
Also make sure you are using the RID option in the ADS function set then create a superuser account - Set a Superuser in CONFIGURATION ->; NAS settings ->; Function: SMB settings, you can use this account to set permissions from the ADS server side.