Taken from somewhere but i forgot
Tutorial: Setting Up Samba 3.x
admin – full access to workstation
teacher – almost full access to workstation – minus certain control panel functions
student – lockdown city – no network browsing, no software installation, no control panel
Workstations are joined to the Samba domain and function the same way they would in a Windows server based domain.