[global]

   workgroup = labor
   admin users = @"Domain Admins"
   server string = %h server (Samba, Ubuntu)
   wins support = yes

;   wins server = w.x.y.z

   dns proxy = no

;   name resolve order = lmhosts host wins bcast

# This can be either the interface name or an IP address/netmask;
# interface names are normally preferred
#   interfaces =  192 . 168 . 2 . 0 / 24   192 . 168 . 5 . 0 / 24 

;   bind interfaces only = true

   log file = /var/log/samba/log.%m
   max log size =  1000 
;   syslog only = no

   syslog =  0 

# Do something sensible when Samba crashes: mail the admin a backtrace
   panic action = /usr/share/samba/panic-action %d

   security = user
   encrypt passwords = true
   passdb backend = tdbsam
   obey pam restrictions = yes

;   guest account = nobody
;   invalid users = root

;   unix password sync = no

   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .

;   pam password change = no

########## Domains ###########

   domain logons = yes
   logon path = \\%N\profiles\%U
# Another common choice is storing the profile in the user's home directory
  ; logon path = \\%N\%U\profile

# The following setting only takes effect if 'domain logons' is set
# It specifies the location of a user's home directory (from the client
# point of view)
   logon drive = H:
   logon home = \\%N\%U
   logon script = logon.bat

 add user script = /usr/sbin/useradd -d /dev/null -g  100  -s /bin/false -M %u
 add machine script = adduser --ingroup wheel --disabled-password --system --force-badname "%u"

 socket options = TCP_NODELAY

 domain master = yes
 local master = yes

# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash

#======================= Share Definitions =======================

[homes]
   comment = Home Directories
   browseable = no
   writable = yes

# By default, \\server\username shares can be connected to by anyone
# with access to the samba server.  Un-comment the following parameter
# to make sure that only "username" can connect to \\server\username
;   valid users = %S

# By default, the home directories are exported read-only. Change next
# parameter to 'yes' if you want to be able to write to them.
;   writable = no

# File creation mask is set to  0600  for security reasons. If you want to
# create files with group=rw permissions, set next parameter to  0664 .
;   create mask =  0600 

# Directory creation mask is set to  0700  for security reasons. If you want to
# create dirs. with group=rw permissions, set next parameter to  0775 .
;   directory mask =  0700 

# Un-comment the following and create the netlogon directory for Domain Logons
# (you need to configure Samba to act as a domain controller too.)
[netlogon]
   comment = Network Logon Service
   path = /home/samba/netlogon
   guest ok = yes
   writable = yes
   share modes = no

[profiles]
   comment = Users profiles
   path = /home/samba/profiles
   read only = no
   guest ok = yes
   browseable = no
   create mask =  0600 
   directory mask =  0700 
   profile acls = yes
   csc policy = disable
   writable = yes
   force user = %U

[homedirs]
   path = /home
   browseable = yes

[printers]
   comment = All Printers
   browseable = no
   path = /tmp
   printable = yes
   public = no
   writable = no
   create mode =  0700 

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no