# smb.conf is the main Samba configuration file.
# Date: 2016-05-13
[global]
	workgroup = DOMAIN_NAME
	# ja das NT1 wird gebraucht um das Profilproblem abzuschalten
	server max protocol = NT1
	# optional only if need
	#encrypt passwords = true
	passdb backend = tdbsam
	printing = cups
	printcap name = cups
	printcap cache time = 750
	cups options = raw
	map to guest = Bad User
	#include = /etc/samba/dhcp.conf
	# for older win like win98/NT
	logon path = \\%L\profiles\.msprofile
	logon home = \\%L\%U\.9xprofile
	# /for older win like win98/NT
	logon drive = h:
	logon script = login.cmd
	usershare allow guests = No
	add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s /bin/false %m$
	domain logons = Yes
	domain master = Yes
	local master = Yes
	os level = 255
	preferred master = Yes
	admin users = root @ntadmin
	security = user
	# your server IP
	wins server = 192.168.x.y
	wins support = Yes
	# This server names MUST be UPPERCASE for compability
	netbios name = DER-SERVERNAME
	server string = DER-SERVERNAME (%h)
	time server = Yes
	# your server-interface IP/MASK
	interfaces = 192.168.x.y/255.255.255.0
	bind interfaces only = yes
	# only log to file not to syslog too
	syslog = 0
	# log level, increase only for testing. 1 = minimal ... 5 = fulllog
	log level = 1
	#log level = 2
	#log level = 4
	#log level = 5
	## TRASHCAN ########
	# vfs modul 'Papierkorb' einbinden
	vfs objects = recycle
	# Verzeichnis fuer PK
	#recycle: repository = __trashcan__
	# Verzeichnis fuer PK (by groupshares set to user trash)
	recycle: repository = __trashcan__%u
	# Verzeichnisstruktur im PK mitsichern
	recycle: keeptree = Yes
	# PK Dateien last access time setzen (for cleanup)
	recycle: touch = Yes
	# PK Dateien versionieren
	recycle:versions = No
	#recycle:versions = Yes # 20080318# hmm, no dir del while off ???
	# sofort zu loeschende Dateitypen
	recycle: exclude = *.tmp, *.temp, *.log
	# sofort zu loeschende Verzeichnisse
	## recycle: exclude_dir = tmp
	# Ausnahmen fuer Versionierung
	## recycle: noversions = *.doc, *.xls, *.mdb, *.pdf 
	# PK Maxsize  ??????????ß
	#recycle: maxsize = 0 ???????????
	## /TRASHCAN ########

[homes]
	comment = Home Directories
	valid users = %S, %D%w%S
	browseable = No
	read only = No
	inherit acls = Yes
	create mask = 0770
	force create mode = 0770
	force directory mode = 0770
	#create mask = 0666
	#force create mode = 0664
	#force directory mode = 0775
	#valid users = @users @ntadmin
	#write list = @users @ntadmin

[profiles]
	comment = Network Profiles Service
	path = %H
	read only = No
	store dos attributes = Yes
	create mask = 0600
	directory mask = 0700
	valid users = @users @ntadmin
	browseable = No
	profile acls = Yes

#[users]
#	comment = All users
#	path = /home
#	read only = No
#	inherit acls = Yes
#	veto files = /aquota.user/groups/shares/

#[groups]
#	comment = All groups
#	path = /home/groups
#	read only = No
#	inherit acls = Yes

[printers]
	comment = All Printers
	path = /var/tmp
	printable = Yes
	create mask = 0600
	browseable = No

[print$]
	comment = Printer Drivers
	path = /var/lib/samba/drivers
	write list = @ntadmin root
	force group = ntadmin
	create mask = 0664
	directory mask = 0775

[netlogon]
	comment = Network Logon Service
	path = /var/lib/samba/netlogon
	write list = root @ntadmin
	valid users = @users @ntadmin
	browseable = No

# bis hierher sind alle Einträge verpflichtend und müssen vorhanden sein.

###################################

# ab hier die eigentlichen:

### NET DRIVES ##########

#[prog$]
#	comment = Programme
#	path = /dir....programs
#	valid users = @users @ntadmin
#	write list = @ntadmin
#	read only = yes
#	browseable = yes

#[swap]
#	comment = Algemeines Austauschverzeichnis
#	path = /dir....swap
#	valid users = @users @ntadmin
#	read only = no
#	create mask = 0666
#	force create mode = 0666
#	force directory mode = 0777

#[doc]
#	comment = Anleitungen
#	path = /dir....doc
#	valid users = @users @ntadmin

[system]
	comment = Noch ein Beispiel als Rootfreigabe
	path = /
	valid users = @ntadmin
	write list = @ntadmin
	read only = no
	browseable = yes
	create mask = 0770
	force create mode = 0770
	force directory mode = 0770