samba+ldap windowsxp profiles problem help

[jasper2300]

i using samba as a PDC for over 1ear now with unix accounts.
Now i have installed this to youse ldap everiting whent fine
i can yoin the domain.
But now thihg go wrong when i login windows gives me a error that there is already a profile with the wrong security setting and i'm loged in withe the standart profile, when i log out noting is stored under profiles/user.
The user map is created with te user as owner.

this has cost me a weak already the log files give me no error
exep those of windows so not mutch info there.

i hate long post but het is my smb.conf
tried a lot of diverent config's so it kint of a mess.

all help tip's or comment are welkom.

[global]
workgroup = test
netbios name = PDC
#interfaces = 192.168.5.11
#username map = /etc/samba/smbusers
#enable privileges = yes
server string = Samba Server %v
security = user
encrypt passwords = Yes
# min passwd length = 3
# obey pam restrictions = No
# ldap passwd sync = Yes
#unix password sync = Yes
passwd program = /sbin/smbldap-passwd -u %u
passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new password*" %n\n"

#log level = 0
#syslog = 0
log file = /var/log/samba/%m.log
max log size = 100000
#time server = Yes
#socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
mangling method = hash2
#Dos charset = 850
#Unix charset = ISO8859-1

logon script = logon.bat
logon drive = X:
logon home =
logon path = \\%L\profiles\%U

domain logons = Yes
os level = 255
preferred master = Yes
domain master = Yes
wins support = Yes

passdb backend = ldapsam:ldap://127.0.0.1/
# ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
ldap admin dn = cn=root ,dc=techspace,dc=nl
ldap suffix = dc=techspace,dc=nl
ldap group suffix = ou=Group
ldap user suffix = ou=People
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=People
# ldap ssl = start tls

add user script = /sbin/smbldap-useradd -m "%u"
# ldap delete dn = Yes
delete user script = /sbin/smbldap-userdel "%u"
add machine script = /sbin/smbldap-useradd -w "%u"
add group script = /sbin/smbldap-groupadd -p "%g"
#delete group script = /sbin/smbldap-groupdel "%g"
add user to group script = /sbin/smbldap-groupmod -m "%u" "%g"
#delete user from group script = /sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /sbin/smbldap-usermod -g "%g" "%u"

wins support = yes
wins server = 192.168.0.9
hostname lookups = yes
#name resolve order = wins lmhosts bcast host

#idmap uid = 500-20000
# idmap gid = 500-20000

# printers configuration
printer admin = @"Print Operators"
load printers = Yes
create mask = 0640
directory mask = 0750
nt acl support = No
printing = cups
printcap name = cups
deadtime = 10
guest account = nobody
map to guest = Bad User
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
show add printer wizard = yes
; to maintain capital letters in shortcuts in any of the profile folders:
preserve case = yes
short preserve case = yes
case sensitive = no

[homes]
comment = prive' dir van %U, %u
read only = No
create mask = 0644
directory mask = 0775
browseable = No

[netlogon]
path = /home/netlogon/
browseable = No
read only = yes

[profiles]
path = /home/profiles
read only = no
#create mask = 0600
#directory mask = 0700
#create mode = 0777
writable = yes
#browseable = yes
#guest ok = yes
#csc policy = disable
#profile acls = yes