Linux Expert Needed for Active Directory Integration with Samba Share

I am looking for someone very experienced in Linux and MS Active Directory. I have a Linux (Ubuntu LTS 16.04 VM) which needs to have authentication back to AD for file shares. The MS AD (SBS 2011) will do the back end authentication. Many of the workstations are OS X based, so we need to use the fruit add-ons for Samba reliability with OSX. I can discuss this more with you and provide links to the docs I have been using if needed. I have been having the issue where users can authenticate, see the folders, but cannot rename or change. It seems the Kerberos/Samba/Directory permissions are not correct. I need help from someone whose Linux skills are more robust than mine, and it is time to ask for help. I will need full documentation on what you did and the needed configuration in case the server breaks and I need to fix and verify something. A link to a pubic "how to" is not acceptable, I need to know which config files are needed and their content. I will provide an OpenVPN based login for remote work. Nothing is accessible outside the firewall.