[global]
        unix charset = LOCALE
        workgroup = SHESTCO
        interfaces = eth0, lo
        bind interfaces only = Yes
        passdb backend = ldapsam:ldap://127.0.0.1/
        username map = /etc/samba/smbusers
        log level = 1
        syslog = 0
        log file = /var/log/samba/%m
        max log size = 50
        smb ports = 139
        name resolve order = wins bcast hosts
        time server = Yes
        printcap name = CUPS
        show add printer wizard = No
        add user script = /usr/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/sbin/smbldap-userdel "%u"
        add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
        add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
        add machine script = /usr/sbin/smbldap-useradd -i "%u"
        logon script = scripts\logon.bat
        logon path = \\%L\profiles\%U
        logon drive = X:
        domain logons = Yes
        preferred master = Yes
        wins support = Yes
        ldap admin dn = cn=Manager,dc=shestco,dc=org
        ldap group suffix = ou=Groups
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=Computers
        ldap passwd sync = Yes
        ldap suffix = dc=shestco, dc=org
        ldap user suffix = ou=Users
        idmap backend = ldap:ldap://127.0.0.1
idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind separator = -
        winbind use default domain = Yes
        force user = %U
        map acl inherit = Yes

[netlogon]
        comment = Network Logon Service
        path = /store/netlogon
        guest ok = Yes
        locking = No

[profiles]
        comment = Profile Share
        path = /store/profiles
        valid users = %U, "@Domain Admins"
        read only = No
        create mask = 0600
        directory mask = 0700
        guest ok = Yes
        profile acls = Yes
        browseable = No
        csc policy = disable