Directory permission

[Greg Mitchell]

Samba-NT,

I am using samba-1.9.18p10 and I am having difficulty with setting up password protection.  I would like to use Samba as a simple file server for file sharing and backups.  I was wanting to make the smb.conf read only and just manage the passwords manually.  The users do not know Unix or want to deal with a separate password utility.  I would like to make the top level directory readable to all and have some level of permissions below the top level, user and maybe group.  I have a user created with the passwd/user_name the same on both the PC and Unix.  Could someone be so kind as to show me the error of my ways.  Here is a smb.conf that I have been working with but it is not accessable to anyone.  Having "guest account = guest" is too open.

Thank you in advance,

Greg

[global]
	dns proxy = yes
	interfaces = 156.132.185.181
	workgroup = WORKGROUP
	read raw = yes
	write raw = yes 
	security = user
	encrypt passwords = no
	password level = 2
	username level = 2
	domain logons = yes
	max log size = 50000
	debug level = 20
	syslog only = no
	load printers = yes
	status = yes
	browseable = yes
	allow hosts = 156.132.185.
	follow symlinks = yes
	log file = /opt/samba/log/log.%m
	
##################

   [shared]
	comment = shared_files
	path = /user/shared_files
	browseable = yes
	writable = no
	public = yes
	
   [new]
	comment = new origin files
	path = /user/new_files
	writable = no
	browseable = yes
	public = yes
	read only = yes

   [project]
	comment = project
	path = /user/project
	valid users = ntuser
	#ntuser account = ntuser
	writable = no
	browseable = yes
	public = yes
	read only = no

   [esc_users]
	comment = ESC User Directories 
	path = /users/esc_users
	writable = yes
	browseable = yes
	public = yes
	read only = no
	
   [esc_shared]
	comment = ESC Shared Directories 
	path = /users/esc_shared
	writable = yes
	browseable = yes
	public = yes
	read only = yes	
	

   [ntuser]
	comment = ntuser
	path = /user/esc_users/ntuser
	valid users = ntuser
	browseable = yes
	writable = yes
	write list = %S 
	public = yes
	read only = yes
   [bella]
	comment = Ed Silva's Laptop 
	path = /tmp
	valid users = ed
	browseable = yes
	writable = yes
	public = yes
	read only = yes