[Samba] SAMBA : require machine to be registered in domain before asking for user and password to access share

[Leonardo Monday]

Hello guys.

I needed some help with the following

what i want to achieve :
- require machine to be registered in domain before asking for user and
password to access share . *NOT OK :*
- users to login in the local computer outside the domain (the owners use
laptops outside) *OK*
- no roaming profiles or homes. *OK*

I got the pc to join the domain , without homes or roaming profile, but any
computer(not joined on the domain) can access the share by using only the
user and password, and i would like that only registered computers would do
so.

*Thanks*

centos 7 64
samba-4.1.12-23.el7_1.x86_64
samba-winbind-4.1.12-23.el7

just a basic test configuration

[Global]
  workgroup = DEV
  server string = SDEV
  netbios name = SDEV
  wins support = yes
  security = user

  log level = 2
  log file = /var/log/samba/log.%m
  max log size = 50
  debug timestamp = yes

  domain master = yes
  domain logons = yes
  local master = yes
  preferred master = yes
  passdb backend = tdbsam
  logon path =
  logon script =

  add machine script = /usr/sbin/useradd -d /dev/null -g 200 -s
/sbin/nologin -M %u

[netlogon]
  comment = Network Logon Service
  path = /var/lib/samba/netlogon
  browseable = No
  writable = No


[me]
path = /home/samba/me
browseable = yes
valid users = user1
writeable = yes
public = no