[Samba] Samba4 and permissions of SYSVOL and NETLOGON

[Jorge Luis Medina Begazo]

Hello,

I was testing samba for serveral months, Now I planning to implementing as AD for about 300 computers, I'm using it as a base of users for squid, dovecot and postfix.
Everything is working fine, but I found a problem, if a user in windows get into the shared folders of the server like SYSVOL and NETLOGON, they are able to delete files and
folders, so I noticed this could be a problem, if someone delete a script or GPO or a virus can corrupt this files, could I change the option "read only = no" to "read only = yes" or I'll have problems?
I noticed this since rc5, I don't know if it was present in rc4 or any before, now I'm using the rc6.
Thanks for your help