Netfolder Proxy user not working as documented?

Hello,

We are using EDIR For LDAP. Part of our EDIR tree is synced to AD for File shares. I defined netfolder on an AD file server. I created a service account to use as the "Net Folder Proxy User." I gave Full Control file rights on the AD server folder structure to the proxy user service account.

I defined a net folder to a share from the AD server to which the Proxy service account had full control.

The proxy user test when defining the netfolder server reports success.

I gave access rights to 3 users:
an edir user who is synced to AD and is an AD Domain admin - "ADadmin"
an edir user who has no AD presence or security - "EdironlyUser"
a local filr user - "LocalFilrUser"

There is a word doc in the net folder

All the users can see the netfolder & word doc inside
all the users can view the details of the word doc
all the users can view the HTML view of the word doc
the filradmin & ADadmin can download the word doc
When the EDIRonlyUser & LocalFilrUser download a doc and open it, this as the content of the word doc :

File error: Cannot execute [getContentLength] on the resource [70000\The quick brown fox jumps over the lazy dog.doc] - Access is denied

There is also a sample PDF file in the net folder.
The ADAdmin & Filr admin can download the file properly.
The Edironly & localfilr users get broken PDFs.

I even went so far as to grant Everyone full control file access to the ADserver file structure hoping that would make this work.

Thanks for any insights,

Frank