Nkonyana seachem you use veto oplock files - it doesn't work as you describe.
Try veto files = /!*.docx/
In theory, this design would prohibit all files except docx. If this design doesn't work through Samba configuration to achieve the desired result.
A workaround script in the crown, removing unauthorized files.