[Samba] New Samba server configuration

[Joseph, Matthew]

Hello,

I need to configure a new Samba 4.1.12 server (previously I was using 3.x).
The old setup (on a completely isolated LAN) was using the "security = server" setup but I noticed that feature has been removed due to security concerns.

So now I'm trying to configure this server and I'm trying to figure out the best option for my network.

Our network looks like the following;

RHEL IdM server
Windows 2008 Active Directory server
Windows 7 Desktop
The LDAP and AD user account passwords are synced using the Red Hat pass sync tool

Currently our users log on to their Windows 7 desktop which mounts a couple of network shares that are hosted by our old Linux Samba server (using the server security).
They are not prompted for credentials (which would be ideal in the new setup if possible) for the Linux network shares upon login.

So what would be my best option to get similar results with Samba 4.x?
>From my understanding security=ads would require my new Samba server to join Active Directory.
Security=domain seems to be very similar to ads.
Security=user does not seem to work for my setup since it relies on the smbpassword to be configured for each individual user?

Since you guys have a lot more expierence with Samba then me I'd appreciate some input on what the best course of action would be for me.

Thanks,

Matt