[global]
    workgroup = EXAMPLE
    realm = EXAMPLE.NET
    security = ADS
    server role = member server

    winbind refresh tickets = yes
    template homedir = /home/%D/%U
    template shell = /bin/bash

    idmap config * : backend = tdb
    idmap config * : range = 3000-7999
    idmap config EXAMPLE : backend = rid
    idmap config EXAMPLE : range = 10000-999999

[team]
    path = /srv/samba/team
    read only = no
    valid users = @"EXAMPLE\Domain Users"