How can I enable anonymous access to a Samba share under ADS security mode?

remove

valid users = "@domain admins", "@domain users"

from [global], only use it in shares that are not "guest" enabled