samba - Nov 2003 - Access Windows 2003 Machine Accounts for ADS group policy software deployment

Hi - I have a global group set up with all of the Windows XP _computer_
accounts as members.  When I do a 'getent group', it resolves all of the
groups with user accounts (shows the member accounts), but the groups with
machine accounts are empty - ie:

MYDOMAIN+My Site Computers:x:10079:  (no members listed even though there
are about 30 machine accounts in this Global group in my AD)

My goal is to set up a software installation repository on my Samba box and
I have GPOs in place to assign software to the machine accounts. Samba logs
show that MYDOMAIN+mymachine$  account cannot be found.  Is it possible to
afford access to Samba shares for machine accounts?

Also, for access lists in smb.conf, I've seen reference to this syntax:
valid users = @'MYDOMAIN+Domain Users'

This doesn't work, so I went with the this:  valid users = @10033    (which
is the group # for MYDOMAIN+Domain Users).  Is this a good way to handle
this or is there a better method?  What is the syntax if I want to use the
group names rather than the group numbers?

Thanks -Kel

Skipped content of type multipart/mixed-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20031111/76556c13/attachment.bin