On an OES server with CIFS enabled in local or not-AD-domain mode authentication is done basically via ldap against the local eDirectory. A user with station restrictions is unable to login via CIFS/SMB to this server if not the server's ip address itself is added to the station restriction list of the user object - regardless if a login is allowed from this workstation or not.
So, one has two choices:
- If a user has station restrictions connections via CIFS/SMB are not allowed even from an allowed workstation
- If a CIFS connection should work you have to add the server itself to the station restriction list. But this means that a connection from anywhere is allowed via CIFS!

If it would work in AD-domain mode too it would be very nice.