You definitely need to read up on the Windows technology side. Active Directory (AD) is a new directory service in Windows 2000 Server and Windows Server 2003. Though Samba can join/participate in an AD domain, it cannot provide AD. AD is more than just authentication.

In your situation, you do not need to worry about AD. As you are only supporting Windows 9x, you will need POLEDIT.EXe for windows 9x to create the policies. Please see the Microsoft website for more information on how to distribute Windows x9 policies throgh the NETLOGON share.
_________________________
There are two types of vessels, submarines and targets.