[global]
	workgroup = OURREALWORKGROUP
	interfaces = 127.0.0.1 eth0
	bind interfaces only = true
## start logon/profiles
	# logon path sets the Windows XP environment variable %USERPROFILE% that pervades the Windows registry.
	#logon path = \\%L\profiles\.msprofile
	#logon home = \\%L\%U\.9xprofile
	# logon home is for 9x/NT and no use / especially under XP
        # Except that CMD prompts defaults path to it
        #logon home = \\%L\profiles\%u
	logon path = \\svrusers\profiles\%u
        logon home = \\svrusers\profiles\%u
	logon script = %g.bat
	#logon script = scripts\admin.bat
	# logon drive : only NT (?)
	logon drive = Z:
## end logon/profiles
## start disable printing
	load printers = no
	printing = bsd
	printcap name = /dev/null
	disable spoolss = Yes
	#printing = cups
	#printcap name = cups
	#printcap cache time = 750
	#cups options = raw
## end disable printing
	map to guest = Bad User
	include = /etc/samba/dhcp.conf
#??#	usershare allow guests = Yes
# Vista start
	map acl inherit = yes
# Vista end
## start PDC config
	domain logons = Yes
	domain master = Yes
	local master = Yes
	os level = 65
	preferred master = Yes
	security = user
	wins support = Yes
## end PDC config
	#add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s /bin/false %m$
	add machine script = /var/lib/samba/script_create_pc.sh %m
	##should maybe be change to
	#add machine script = /root/scripts/script_create_pc.sh %m
#from old server :
	remote announce = 172.16.1.255/ourrealworkgroup
## LDAP START
	#passdb backend = smbpasswd
	#new#passdb backend = ldapsam:ldap://172.16.1.232
	#new#ldap admin dn
	ldap suffix =
## LDAP END
[netlogon]
	comment = Network Logon Service
	path = /var/lib/samba/netlogon
	write list = root
[profiles.V2]
	comment = Network Profiles Service
	path = /data3/data/shares/profiles/
	profile acls = Yes
	csc policy = disable
	hide files = /desktop.ini/
    browseable = No
	writeable = Yes
	read only = No
	store dos attributes = Yes
	create mask = 0600
	directory mask = 0700
[profiles]
	comment = Network Profiles Service
	path = /data3/data/shares/profiles/
	profile acls = Yes
	csc policy = disable
	hide files = /desktop.ini/Thumbs.db/
        browseable = No
	writeable = Yes
	read only = No
	store dos attributes = Yes
	create mask = 0600
	directory mask = 0700
[outlook]
        comment = Archives Outlook %u
        path = /data3/data/shares/outlook/%u
        browseable = Yes
        ;nomore?;readable = Yes
        writeable = Yes
        create mask = 0600
        directory mask = 0700
	hide files = /desktop.ini/
[personnel]
        comment = Dossier personnel %u
        path = /data3/data/shares/private/%u
        browseable = Yes
        ;nomore?;readable = Yes
        writeable = Yes
        create mask = 0600
        directory mask = 0700
	hide files = /desktop.ini/
#??#	inherit acls = Yes
#??#	veto files = /aquota.user/groups/shares/
[commun]
        comment = Repertoire entreprise
        path = /data/shares/commun
        browseable = Yes
        ;nomore?;readable = Yes
        writeable = Yes
	users = @ouremployees
        create mask = 0664
        directory mask = 0775
	hide files = /desktop.ini/
[echanges]
        comment = Repertoire temporaire pour echanges
        path = /data/shares/temporaire
        browseable = Yes
        writeable = Yes
	users = @ouremployees
        create mask = 0640
        directory mask = 0750
	hide files = /desktop.ini/
[twixtel]
        comment = Repertoire programme Twixtel
        path = /data/shares/twixtel
        browseable = No
        writeable = Yes
        create mask = 0644
        directory mask = 0755
;ouremployees, but not basicusers, and changed folder rights :        create mask = 0640
;ouremployees, but not basicusers, and changed folder rights :        directory mask = 0750
	hide files = /desktop.ini/