I've set up a Linux file/print server to be accessible in a W2x Active Directory domain.

My objective is to be able see the windows ad user/group objects from the permissions tab for a file or printer as I would with a windows folder, file, or printer. And if possible, have users be able to see ad users/groups from their windows clients... such as folder owners who wish to grant Jane read/write permissions... to take the load off IS.

I have MSFU 3.5 installed on one of the Windows Domain Controllers and inside the sfu console that server is defined as a Master NIS server--although over on the linux box, the search for NIS servers doesn't detect or acknowledge the master server.

The linux box has been joined to the domain.

From looking around, everything I read seems to mention user mapping. So is it so that there will need to be a unix object mapped for each windows domain object(users/groups)??

If so, is there a utility or script that will copy/create these object over on the linux server? And, sync the passwords?

What is the best way from a long-term admin perspective?

tia