[Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

[Ulrich Schneider]

Hm, your alternative (understanding windows acls) seems not much better 
to me.

Yesterday it seemed to work ... until I deleted a folder created by an 
administrator as a ordinary user.

Do I get this right? valid users = @group ... so @group could be any 
group in the Active Directory?

> Hi
> I wonder if it is awesome. Do we _have_ to set:
> valid users = @group
> in smb.conf?
> Can't we use setfacl and permissions on the folder instead? It works
> fine without writing anything under the share in smb.conf. I must admit
> to suffering smb.conf phobia.
> Cheers
>
>