[Samba] samba and active directory groups

[Tharanga Abeyseela (RGA)]

Hi list,

I have successfully authenticated active directory users with samba. Now I need to create some Active directory security groups and authenticate and redirect those users to a specific directory.
Ex:
IT_GROUP -  user x , user y
FIN_group - user a, user b

If the user x , access the samba server, that user will be redirected to the specific directory (that's in the samba stanza).

This is my  smb.conf

[global]
workgroup = xxx
realm = xxx.COM
preferred master = no
server string = Samba file and print server
security = ADS
encrypt passwords = yes
password server = *
log level = 3
log file = /var/log/samba/%m
max log size = 50
winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
auth methods = winbind
printcap name = cups
printing = cups

[homes]
comment = Home Directories
path = /home/IT
browseable = no
writable = yes
inherit acls = yes
inherit permissions = yes
#valid users = @"ADGROUP+domain users"
valid users = @"ADGROUP+domain test_access1"
#create mode = 0664
#directory mode = 0775

[IT]
comment = Home Directories
path = /home/IT
browseable = no
writable = yes
#valid users = @"ADGROUP+domain users"
directory mode = 0775
valid users = @"ADGROUP+domain test_access2"
write list = @"ADGROUP+domain test_access2"
read list = @"ADGROUP+domain test_access2"


If someone try to access the samba server (\\sambaserver<file:///\\sambaserver>)  it will  create "ADusername" directory on the server. (user Mary access the server it will create a directory named mary automatically ) I need to redirect them to a specific directory based on the Active directory group access .

Can someone help to me solve the issue.

Thanks,
Tharanga