[Samba] WINBIND configuration and NT Authentication

[Chris McKeever]

Setup: 
	Suse 7.2, Samba 2.2.6
	Win 2K PDC

Project:
I would like to use winbind to authenticate users that do not have local
accounts on the linux machine for access to various file and print shares.
I have gotten winbind to successfully grab the user and groups from the NT
box (verified by getent passwd).  However, I have had little luck obtaining
the permission based file share that I would like.

Questions:
1.  Do users accessing the share need local accounts?
	a. if so, is there a way to export users from win2k into linux?
2.  Can you use NT groups in the smb.conf file to control access?
3.  The documentation on winbind
http://us2.samba.org/samba/docs/man/winbindd.8.html almost makes it sound as
if it may be possible to authenticate NT users and grant them login rights
(actual session login rights, not samba shares) to the linux machine.  Is
this true?  If so is there additional configuration to achieve this assuming
quesiton 1 has been answered and setup properly?
4.  Does anyone know of further online winbind documentation?

Thanks in advance...

Chris McKeever