samba in ad without winbind

[danber]

Hi all, I am trying to use samba 4.4 with active directory 2008R2 without the usage of winbind because it puzzle me with mapping. I wish to create username on unix just for the user I want to access the file sharing, not for all users in AD. Also I wish to create groups on unix so I can assign permissions to the shares using the unix groups.
This environment is now working with samba3, but I cannot replicate it on samba 4.
As you know: is possible? If yes, please help me to understand the problem.
Thank you

Daniele Bernazzi