samba - Jul 2005 - Setup Recommendation Needed

Here is what I have:
I have a home office with a Windows 2000 active directory domain.  I
have a remote office running Samba 3.0.14a connected to the home office
via a VPN.  All users at the remote office are required to have an
account on the active directory domain at the home office for several
reasons, including the use of Exchange Server.  All client machines at
the remote office run XP Pro.

Required Options:
*  I need to be able to run logon scripts locally at the remote office,
from the Samba server at the remote office.
*  I need for each user to have a single user account and it needs to be
the one in active directory on the domain controller at the home office.


Optional Result:
*  I would like the XP Pro client machines to still be able to log on if
the VPN connect gets dropped.  I believe this is taken care of already
due to the fact that the XP machines will cache the logon credentials,
but I thought I would mention that in case there is a better way of
doing this.

General Question:
How do I go about setting this up?  I have looked at the docs and have
been messing around with several different settings and can't quite
figure it out.

Specific Questions:
1.)  What samba security mode should I be using?
2.)  Should the samba server workgroup setting be unique for the remote
site or the same as the home office domain?
3.)  Should the samba server be joined to the home office domain?
4.)  What domain should the XP Pro clients join, the local domain or the
home office domain?
5.)  Does this require winbind to work?

Thanks to all in advance.

how You can use single user database. I had an idea, but I didn't have 
a time to test it :-)

a) passwords are stored in kerberos, both samba and AD domain use 
kerberos.

b) users are stored either in samba/ldapsam or AD, and imported/exported 
via LDIF format (AD allows importing/exporting such stuff using LDIF, 
without passwords)
> Here is what I have:
> I have a home office with a Windows 2000 active directory domain.  I
> have a remote office running Samba 3.0.14a connected to the home office
> via a VPN.  All users at the remote office are required to have an
> account on the active directory domain at the home office for several
> reasons, including the use of Exchange Server.  All client machines at
> the remote office run XP Pro.
>
> Required Options:
> *  I need to be able to run logon scripts locally at the remote office,
> from the Samba server at the remote office.
> *  I need for each user to have a single user account and it needs to be
> the one in active directory on the domain controller at the home office.
>
>
> Optional Result:
> *  I would like the XP Pro client machines to still be able to log on if
> the VPN connect gets dropped.  I believe this is taken care of already
> due to the fact that the XP machines will cache the logon credentials,
> but I thought I would mention that in case there is a better way of
> doing this.
>
> General Question:
> How do I go about setting this up?  I have looked at the docs and have
> been messing around with several different settings and can't quite
> figure it out.
>
> Specific Questions:
> 1.)  What samba security mode should I be using?
> 2.)  Should the samba server workgroup setting be unique for the remote
> site or the same as the home office domain?
> 3.)  Should the samba server be joined to the home office domain?
> 4.)  What domain should the XP Pro clients join, the local domain or the
> home office domain?
> 5.)  Does this require winbind to work?
>
> Thanks to all in advance.
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>