Greg,

while I do not know your smb.conf options for accessing the Apache
account and subdirectories, you might want to have a look at the
smb.conf directive "create mask" in regard to new file permission.

If your smb.conf has the [homes] section (maybe from the sample
config), you might extend it by a few directives similar to

  preserve case = yes
  short preserve case = yes
  map archive = no
  create mask = 640
  path = %H/..

and then connect to the Apache account via \\your3k\mgr.apache,
responding with user,account passwords in the pop-up dialog box.
(Ignore the "Connect As" field in that dialog box).

Works nicely for me. Your milage may vary ;-)

Lars.