I have successfully followed this tutorial
http://tuxnetworks.blogspot.com/2010...cid-short.html
and set up a working Samba LDAP server, I can join the domain, login, etc, with no problems except for having to set SERVERSIGNING = Disabled in the smb.conf file. (I don't even understand whats going on there, but that's a whole separate post.)

I have my unix/smbldap account set as an administrators, and a domain admins group, but I am unable to modify my windows 7 client without having to enter the local administrator username and password. Even when I try to change some of the Performance Options I.E Aero Peek, it will only retain the settings for the login session.

I have enabled roaming profiles (not entirely sure its working though) but have tried without, and can't seem to find the issue. I thought
it would be related to permissions, but my current group settings don't seem to have any effect.

Any help would be great.
Thanks!