Samba as a PDC question

Hi everyone,

I want to run RH 9.0 as a Samba PDC in a (50 user) all windows XP Pro.
network. I would like Samba to do the following:

1. Provide *logon* authentication for the users. If they don't
authenticate then I don't want them to be able to log onto the system.

2. Is there a way with Samba to control if a user can install software?
Kinda like with a Windows domain, if you are a *user* the you can't install
software. However, if you are a *power user* you can. I don't want just
anyone to be able to make changes to their systems.

I know I can do it in the registry but I am looking for a *central* way to
do it. Besides, the user can just run regedit and undo my changes.

Thanks for any input.


Clay