samba as a domain controller
 

hi i've just made my fedora box running the last samba server to be a primary domain controller and it's awesome!!! it works really well so i'm really pleased with it but i was wondering if anyone knew of a good website that maybe gave some extra information about samba running as NT domain controllor, just simple things like not letting a group be able to access the 'run' command or something of that nature, it'd be great if someone could help me