domain groups information & observation

[Andrew Perrin - Demography]

1.) I'd be interested in any advice about using the domain groups stuff in
smb.conf -- specifically, how to map a unix group to an nt group (even
just unix:ntusers -> users and unix:ntadmins -> Administrators).  Has
anyone successfully done this?

2.) After adding domain admins = <username list> to smb.conf, everyone in
the list seems to have interchangeable profiles -- that is, if I do:
domain admins = foo bar
then login as foo and do something to my profile (say, copy something to
the desktop), then log out and login as bar, the profile change takes
effect for both, being copied into bar's profile directory.  This does not
seem to happen for non-admin users, just within the admin group.  Is this
normal or designed behavior?  It seems significantly different from
NT-alone behavior, where multiple users are called Administrators and have
their own profiles with Administrator permissions.  

Thanks-

---------------------------------------------------------------------
Andrew J. Perrin - aperrin at demog.berkeley.edu - NT/Unix Admin/Support
Department of Demography    -    University of California at Berkeley
2232 Piedmont Avenue #2120  -    Berkeley, California, 94720-2120 USA
http://demog.berkeley.edu/~aperrin --------------------------SEIU1199