[global]
        dos charset = 850
        unix charset = ISO8859-1
        workgroup = IDEALX-NT
        netbios name = PDC-SRV
        server string = SAMBA-LDAP PDC Server
        passdb backend = ldapsam:ldap://127.0.0.1/
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
        logon script = STARTUP.BAT
        ldap admin dn = cn=Manager,dc=IDEALX,dc=ORG
        ldap delete dn = Yes
        ldap group suffix = ou=Groups
        ldap machine suffix = ou=Computers
        ldap passwd sync = Yes
        ldap suffix = dc=IDEALX,dc=ORG
        ldap ssl = start tls
        ldap user suffix = ou=Users
        comment = Home Directories
        path = /home/samba/profiles
        valid users = %U, "@Domain Admins"
        force user = %U
        read only = No
        create mask = 0600
        directory mask = 0700
        guest ok = Yes
        profile acls = Yes
        browseable = No
        csc policy = disable
        # next line is a great way to secure the profiles
        force user = %U
        # next line allows administrator to access all profiles
        valid users = %U @"Domain Admins"


  ...
  logon script = STARTUP.BAT
  ...



[netlogon]
        path = /home/samba/netlogon/
        read only = Yes

[doc]
        path = /usr/share/doc
        create mask = 0750