You cannot use an AD solution in your environment.

You must use policy files. You do not need to use the NT server to serve the policy files, the samba server can do it.

If there is no AD domain the W2K machines will load and use the policy file(s).

This is all documented in the link you were provided with: http://de.samba.org/samba/devel/docs/html/policymgmt.html#AEN3002

Note the comment:
quote:
Windows NT4 System policies allows setting of registry parameters specific to users, groups and computers (client workstations) that are members of the NT4 style domain. Such policy file will work with MS Windows 2000 / XP clients also.
To summarise this document, you cannot support full GPOs from a non-AD environment. You *can* impose all standard policies using policy files. These policies may be applied to Win9x, NT and W2K.

If you have registry changes which are not already in the policy templates, you may create a new template file which has the registry keys that you are specifically interested in.

Policies can be confusing when you first come across them, but you will need to read up on them and understand how they work before you can do anything useful.