[global]                                                                                        
	workgroup = DOMAIN
        realm = DOMAIN.NET
        preferred master = no
        server string =
        security = ADS
        encrypt passwords = true
        log level = 3
        log file = /var/log/samba/smb.log
        max log size = 50
        printcap name = cups
        printing = cups
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        winbind nested groups = Yes
        winbind separator = +
        template homedir = /vol1/homes/%U
        idmap uid = 2000-20000
        idmap gid = 2000-20000
        ;template primary group = "Domain Users"
        template shell = /bin/bash
        obey pam restrictions = yes