# domain controller, netlogon & profiles
#
[netlogon]
	comment = Network Logon Service
	path = ::path.shares::/pdc/netlogon
	guest ok = yes
	writable = no
	# browseable ... it's ok?
        browseable = no
	# share modes ... deprecated
	#share modes = no

[profiles]
	path = ::path.shares::/pdc/profiles
	read only = no
	create mask = 0600
	directory mask = 0700
        browseable = no
        guest ok = yes
        profile acls = yes
        csc policy = disable
        # next line is a great way to secure the profiles 
        force user = %U 
        # next line allows administrator to access all profiles 
        valid users = %U @"Domain Admins"

