The text below is an excerpt of the Samba main configuration file. Select the THREE correct statements: [global] logon script = logon.cmd [netlogon] path = /var/lib/samba/netlogon read only = yes writ

Logon scripts (`.cmd` or `.bat`) are typically executed by Windows clients and should therefore be in a Windows-compatible format (e.g., CRLF line endings), not necessarily ASCII Linux format (LF line endings).

The `logon script` directive in the `[global]` section instructs Samba to inform the client to execute the specified script (`logon.cmd`) after a successful logon, which is typically used for client environment preparation.

When `logon script` is defined in the `[global]` section, Samba expects the script to be found within the share designated as `[netlogon]`, making the script path relative to that share's configured `path`.

The `write list = root` parameter configured for the `[netlogon]` share explicitly restricts write access to only the 'root' user, meaning other users cannot modify the `logon.cmd` script.

Samba itself provides the mechanism for clients to download and execute a logon script, but it does not supply the actual contents of the `logon.cmd` file; administrators must create and manage this script.