In samba 3.5 our users were successfully running robocopy with the /copyall and /mir switches to copy data from a Samba share to a local directory on Windows. After upgrading to samba 3.6.4 robocopy fails when using the /copyall switch. Copyall is equivalent to /copy:DATSOU and we found that by removing the U switch (Auditing Information) robocopy runs without error. 

Every folder and/or file copied returns errors like :
**************
	  New Dir          7	\\10.1.3.29\test\migrationtimestamps\
2012/04/26 15:54:05 ERROR 5 (0x00000005) Copying NTFS Security to Destination Directory c:\test2\
Access is denied.
	    New File  		  493070	Initial results presentation v2.pptx
2012/04/26 15:54:05 ERROR 5 (0x00000005) Copying NTFS Security to Destination Directory c:\test2\
Access is denied.
************

All tests were performed on a Windows 7 client. Initial tests were run without SMB2 enabled, enabling SMB2 did not change the result.


Example smb.conf:

[global]
        workgroup = TEST2K8
        realm = TEST2K8.MYCORP.NET
        security = ADS
        allow trusted domains = No
        syslog = 0
        load printers = No
        printcap name = /dev/null
        disable spoolss = Yes
        show add printer wizard = No
        winbind enum users = Yes
        winbind enum groups = Yes
        idmap config TEST2K8: range = 400000-8000000
        idmap config TEST2K8: backend = rid
        idmap config *: range = 200000-210000
        idmap config * : backend = tdb
        force unknown acl user = Yes
        printing = bsd
        print command = lpr -r -P'%p' %s
        lpq command = lpq -P'%p'
        lprm command = lprm -P'%p' %j

[test]
        path = /mnt/foo
        admin users = SUPPORT2K8\test_user_admin
        read only = No
        inherit permissions = Yes
        inherit acls = Yes
        map acl inherit = Yes
        case sensitive = Yes
        hide unreadable = Yes
        veto files = /.snapshot/
        store dos attributes = Yes
        delete readonly = Yes
        dos filemode = Yes