[global]
        dos charset = CP866
        workgroup = TD-ART
        realm = ADS.TD-ART.LAN
        netbios name = USER
        interfaces = lo, 192.168.35.0/24
        bind interfaces only = Yes
        security = ADS
        dedicated keytab file = /etc/krb5.keytab
        kerberos method = secrets and keytab
        log level = smb:5 auth:5 winbind:0 passdb:0 tdb:0 sam:5 idmap:0
        debug uid = Yes
        printcap name = /dev/null
        browse list = Yes
        preload = homes
        panic action = /usr/share/samba/panic-action %d
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        winbind nss info = rfc2307
        winbind refresh tickets = Yes
        winbind offline logon = Yes
        dns forwarder = 192.168.35.4 (AD DC)
        idmap config td-art : range = 500-99999
        idmap config td-art : schema_mode = rfc2307
        idmap config td-art : backend = ad
        idmap config * : range = 100000-100999
        idmap config * : schema_mode = rfc2307
        idmap config * : backend = tdb
        idmap_ldb:use rfc2307 = yes
        map acl inherit = Yes
        store dos attributes = Yes
        vfs objects = acl_xattr

[homes]
        comment = Home Directory
        path = /home/%S
        valid users = %S
        read only = No
        browseable = No
        csc policy = disable

[netlogon]
        comment = Network Logon Service
        path = /nfs/netlogon
        csc policy = disable

[printers]
        comment = All Printers
        path = /var/spool/samba
        force group = +Domain\040Users
        create mask = 0760
        printable = Yes
        print ok = Yes
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/printers
        write list = root, @Domain\040Admins

[D]
        comment = Projects
        path = /nfs/d
        read only = No

[E]
        comment = Library
        path = /nfs/e
        read only = No

[DrWeb]
        comment = Dr.Web updates
        path = /nfs/drweb
        admin users = "@BUILTIN\Administrators"
        browseable = No