Problems with samba, how to make nautilus see user and workgroup correctly?

Question

linux

I can't get Samba to work properly with windows network folders on a terminal server
samba config

[global]
  netbios name = DEBIAN-TEST
  workgroup = LAB
  interfaces = eth0
  realm = LAB70
  server string = %h Wheezy Host
  security = ads
  encrypt passwords = true
 password server = srv

  idmap config * : backend = rid
  idmap config * : range = 10000-60000

  winbind use default domain = Yes
  winbind enum users = Yes
  winbind enum groups = Yes
  winbind nested groups = Yes
  winbind separator = +
  winbind refresh tickets = yes

  template shell = /bin/bash
  template homedir = /home/%U

  preferred master = no
  dns proxy = no
  wins server = srv
  wins proxy = no

  inherit acls = Yes
  map acl inherit = Yes
  acl group control = yes

  load printers = no
  debug level = 3
  use sendfile = no

it is necessary that users can open the network manager and open the desired network folder through it. but now the wrong working group is displayed in it and it does not go to the servers requiring authentication, swearing at access rights.
Where it is written in logs did not rejoice.
In nautilus and the kde network manager,
it does not see the workgroup of the lab network
through mount.clfs \\192.160.1.1\main /mnt/win rw -U=11 -P=11 noperm with the username and password, everything is mounted fine
smbclient also sees folder when specifying username and password
How to make see x soft leak user and group correctly??
Upd1 terminal server is a debian machine with xrdp, it is
natural that the domain of termanvlnka and windows share is the same
Users log in to xrdp using an account from MS AD using winbind, and it turns out that when entering windows, the terminal incorrectly transfers the data necessary for authentication to the ball.
I can not understand what is being transmitted incorrectly and I do not understand where to read.

Answer 1

Windows and Samba servers in the same domain?
Is there a domain controller?
Windows TS users local or domain Samba?
Answering these questions will get you closer to the solution ;-)