В статье "Configuring Samba as a Windows NT Primary Domain Controller" приводится пример настройки samba для работы в качестве основного контроллера доменов Windows NT.

[global]
# workgroup = Your  NT-Domain-Name
workgroup = DEMODOMAIN
#Your PDC identifying comment 
server string = Samba/NT PDC
#Your netbios name
netbios name = JERRY

#User-level security is standard for a PDC
security = user
#Encrypted passwords are mandatory
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd

unix password sync = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n

*ReType*new*UNIX*password* %n

*passwd:*all*authentication*tokens*updated*successfully*

# set these to act as the domain and local browser
preferred master = yes
domain master = yes
local master = yes
os level = 64

#This one is obvious, and mandatory 
domain logons = yes
#You can use 3 different methods for user logon scripts
#You can identify the logon by the name of the user's machine
logon script = %m.bat
#You can identify the logon by the username
logon script = %U.bat
#Or you can have a single common logon script for users
logon script = logon.cmd

[netlogon]
path = /etc/samba/netlogon
writeable = no
write list = ntadmin

[profiles]
path = /usr/smb/ntprofile
writeable = yes
create mask = 0600
directory mask = 0700



add user script = /usr/sbin/useradd -d /dev/null -g 100 - /bin/false -M %u