I’ve set up Samba once again, and it’s still not easy, especially with Cygwin in the mix. I still haven’t figured out Cygwin, but I did get the magic phrase that lets Windows machines run exe files without having to set the execute bit.
This is an option that’s not documented in the /etc/samba/smb.conf file, but that’s where it goes:
# Allow Windows machines to execute things that don't have
# the execute bit set
acl allow execute always = True
Thanks to forge.univention.org/bugzilla/show_bug.cgi?id=33785 for the info!