Unable to set Deny permissions in AD

I am unable to set deny permissions for windows security settings. I am able to check the box but when I hit apply the check-mark inside of Deny is removed and the user is still able to access the share. This is for all users and groups.
Before hitting apply

After the check-mark is automatically removed.

Hi @Stephen_Kluthe and welcome to Rockstor :sunny:

My suggestion over samba AD integration:
have your root share with 777 permissions, then have subfolder created from an admin user to set win ACL.
This usually helps with POSIX vs Win ACL