[global]
        # Domain Settings
        workgroup = <Pre-Windows 2000 Name of your Domain>
        security = ads
        realm = <Your AD Realm>
        preferred master = no
        name resolve order = host bcast
        netbios name = <The name of the server>
        server string = Darwin 7.8.0
        local master = yes
        domain master = no
        password server = <Fully qualified DNS entry for an AD Sever>
                
        # Charset Settings
        display charset = UTF-8-MAC
        dos charset = CP437
        unix charset = UTF-8-MAC

        # Log settings
        log file = /usr/local/samba/var/log/log.%m
        log level = 2
       
        # Security Settings
        guest account = nobody
        encrypt passwords = yes
        map to guest = never
        
        # Authentication Settings       
        passdb backend = smbpasswd
        auth methods = winbind

        # Network Settings
        socket options = TCP_NODELAY 
        use spnego = yes

        # winbindd Settings
        winbind separator = +
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind enum users = yes
        winbind enum groups = yes
        template shell = /bin/tcsh
        template homedir = /Users/%U

# Share definitions; these will be specific to your network, but generally:
[homes]
        comment = User Home Directories
        path = /Users/%U
        root preexec = /usr/sbin/inituser %U #Optional
        read only = no
        browseable = no
[Home]
        comment = Home Directories
        inherit permissions = no
        path = /Users
        security mask = 0700
        directory mask = 0700
        map archive = no
        create mask = 0700
        read only = no
        admin users = Administrator