I had similar issues, here is what I found out
The following line (uncommented) did give me the "Access denied" message, when I tried to join a new machine to the network and used root or Administrator to log on.
; invalid users = root
This line missing from my configuration did prevent me from using the "Administrator" alias for root.
username map = /etc/samba/smbusers
Learned some more