[global]
        workgroup = CORP
        realm = CORP.DOMAIN.COM
        netbios name = SERVER
        server role = active directory domain controller
        allow dns updates = True
        dns forwarder = 192.168.0.1
        server services = +smb -s3fs
        dcerpc endpoint servers = +winreg +srvsvc
        host msdfs = true
        add user script = /usr/sbin/adduser --quiet --ingroup usergroup --disabled-password --gecos "" %u

[netlogon]
        path = /var/lib/samba/sysvol/corp.domain.com/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

[profiles]
        path = /srv/samba/profiles
        read only = No
#       create mask = 0600
#       directory mask = 0700

[homes]
        comment = Home Directories
        directory_mode: parameter = 0700
        path = /home
        read only = No
        csc policy = documents
        browseable = no
#       create mask = 0600
#       directory mask = 0700


[dropbox]
        path = /srv/samba/dropbox
        read only = No
        comment = Domain Dropbox
        browseable = Yes
        create mask = 664
        directory mask = 775