[global]
        workgroup = WORKGROUP
        realm = DOMAIN.COM
        server string = %h server
        security = ADS
        obey pam restrictions = Yes
        pam password change = Yes
        syslog = 0
        log file = /var/log/samba/log.%I
        max log size = 1000
        socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=131072 SO_SNDBUF=131072
        printcap name = /dev/null
        local master = No
        wins server = domain.com
        idmap negative cache time = 300
        template shell = /bin/bash
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        idmap config workgroup:schema_mode = rfc2307
        idmap config workgroup:range = 10000-19999
        idmap config workgroup:backend = ad
        idmap config *:range = 90000-99999
        idmap config * : backend = tdb
        invalid users = root
        allocation roundup size = 4096
        strict allocate = Yes
        use sendfile = Yes
        printing = bsd
        map archive = No
        map readonly = no
        store dos attributes = Yes