The winbindd daemon does a static ldap query to retrieve accounts to be mapped to the unix accounts by doing a objectClass=user query. It would be very nice to be able to change this query to something along the lines of "(& (!(objectClass=computer)) (objectClass=user))" to filter out computers and just have users. As I said, this is just an example, it would be neat however to have some sort of option in the smb.conf to specify what filter is used to retrieve accounts. Thanks for making such a great product!
there are cases where you have to return computer accounts even if you don't want to. The only enhancement request that I think is valid is probably the capability to define the search base (which we need to work on). Thanks for the suggestion though.