There's Samba-4.3.5 in OpenVZ container (Proxmox) used as file-server in AD. Domain controllers is also works on Samba 4. When domain user on windows PC tries to delete file or folder on file share, which he has no rights to delete, Windows successfully deletes it. But in real file stays on the same place on server and re-appears again in Windows view after some time.Samba audit says, that user doesn't delete file. Windows says he does. Log level 10 says nothing about this.smb.conf[global]workgroup = WGsecurity = ADSrealm = WG.LOCALnetbios name = FSRVserver role = autoencrypt passwords = yesauth methods = winbindlog level = 0 vfs:1idmap config * : backend = rididmap config * : range = 300000-400000idmap config * : base_rid = 0idmap config * :schema_mode = rfc2307idmap_ldb:use rfc2307 = yeswinbind nss info = rfc2307winbind trusted domains only = nowinbind use default domain = yeswinbind enum users = yeswinbind enum groups = yeswinbind refresh tickets = yesmax log size = 1000syslog = 1passdb backend = tdbsamobey pam restrictions = yesvfs objects = acl_xattrmap acl inherit = yesstore dos attributes = yesunix password sync = yesload printers = noshow add printer wizard = nodisable spoolss = yesprintcap name = /dev/nullos level = 1case sensitive = nohide unreadable = yeslog writeable files on exit = yesdeadtime = 600ea support = yes[q]    comment = File Share    browseable = yes    path = /opt/q    guest ok = no    read only = no    create mask = 0777    directory mask = 0777    strict sync = yes    sync always = yes    inherit permissions = Yes    inherit acls = Yes    inherit owner = Yes    inherit permissions = yesveto files = /.snap/quota*/RECYCLER/*.vmx/autorun.inf/hide files = .recyclevalid users = +WG\all admin users = +WG\it WG\adminhide unreadable = yesvfs objects= full_audit, recyclefull_audit:facility=LOCAL6full_audit:priority=NOTICEfull_audit:prefix = %M(%I)|%ufull_audit:success = write rename unlink mkdir rmdirfull_audit:failure = write rename unlink mkdir rmdirrecycle:repository = .recyclerecycle:keeptree = yesrecycle:maxsize = 104857600recycle:exclude = ~$*,*.tmp,*.bakaccess based share enum = yesmap acl inherit = yesacl check permissions = yesin Samba docs explanations acl check permissions in off state parameter leads to such behavior of file share. But I have turned it on (and by default it's also enabled).What I'm doing wrong?
Samba 4 - deleted files re-appear again
deleted files;samba4