I have a Default ACL like this set up on my ext3-Filesystem:

sudo setfacl -R -d -m u::rwx,g::rwx,g:privusers:rwx,o::- data

getfacl looks like this:

# file: data/
# owner: lobo
# group: privusers
user::rwx
group::rwx
group:privusers:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:privusers:rwx
default:mask::rwx
default:other::---


when I now create a directory directly on the filesystem (without samba) the acl is correctly applied and inherited:

mkdir test
getfacl test

# file: test/
# owner: lobo
# group: users
user::rwx
group::rwx
group:privusers:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:privusers:rwx
default:mask::rwx
default:other::---


when I create a file inside this folder in directly on the server, the acl works as expected:

touch test/testfile
getfacl test/testfile
# file: test/testfile
# owner: lobo
# group: users
user::rw-
group::rwx                      #effective:rw-
group:privusers:rwx             #effective:rw-
mask::rw-
other::---


but when I create a file on my mounted folder on Windows 7 the acl looks like this:

getfacl test/testwindows
# file: test/testwindows
# owner: grmuser
# group: privusers
user::rwx
group::rwx
group:privusers:rwx
mask::rwx
other::---

so everybody gets unnecessary X-permissions


my Samba-Config looks like this:

[grmdata]
path = /media/grmdata/smbshare
public = no
comment = grm-files
inherit permissions = Yes
inherit acls = Yes
available = yes
browseable = yes
guest ok = no
writable = yes
valid users = grmuser popcorn
read list = popcorn
vfs objects = /usr/lib/samba/vfs/recycle.so
                        recycle:repository=.recycle
                        recycle:versions=True
                        recycle:touch=True
                        recycle:keeptree=True
                        recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*
                        recycle:exclude_dir=/tmp|/temp|/cache
                        recycle:directory_mode=750