Fleshed out the description of restrict anonymous parameter.

(This used to be commit 2d150947082114f5e275a774baefc7e838ab5657)

diff --git a/docs/docbook/smbdotconf/security/restrictanonymous.xml b/docs/docbook/smbdotconf/security/restrictanonymous.xml
index 7f78f94a99030f3221378ffa6fd9d940d5685776..3bd19833de28495cabcbd2a22098474783e9d374 100644 (file)
--- a/docs/docbook/smbdotconf/security/restrictanonymous.xml
+++ b/docs/docbook/smbdotconf/security/restrictanonymous.xml
@@ -3,8 +3,15 @@
                  advanced="1" developer="1"
                  xmlns:samba="http://samba.org/common">
 <listitem>
-    <para>This is a integer parameter, and mirrors as much as possible the functinality the
-    <constant>RestrictAnonymous</constant> registry key does on NT/Win2k.
+    <para>The setting of this parameter determines whether user and
+    group list information is returned for an anonymous connection.
+    and mirrors the effects of the
+    <constant>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\RestrictAnonymous</constant> registry key in Windows
+    2000 and Windows NT.  When set to 0, user and group list
+    information is returned to anyone who asks.  When set
+    to 1, only an authenticated user can retrive user and
+    group list information.  The value 2, supported by
+    Windows 2000 and higher, is not supported by Samba.
     </para>
 
     <para>Default: <command moreinfo="none">restrict anonymous = 0</command></para>