Smb: how do you log access & disconnect users?

Question

I've always relied on AFP for file sharing, but since it seems like that's kind of on the way out and SMB is the new way to do things, I've been trying that out instead. A few questions though...
Where are the access logs? I'm looking for the equivalent of the AppleFileServiceAccess.log that I see in the Console, that shows timestamps with IPs for opening & deleting files, etc. (Maybe logging has to be enabled with some seperate step that's not in the Server app GUI, or the log isn't called something obvious?)
How do you force a user to disconnect? (Remote users sometimes drop connections, so they're really not connected anymore but the server still shows the connection. For AFP users, I can use the Disconnect button to remove these ghosts, but when I try to use that button on an SMB connection I just get a message saying it only works for AFP. So... do the ghosts just pile up and you're supposed to ignore them, or do you have to restart the server, etc.?)

Answer 1

This is exactly what i was looking for, and Nelson is correct.  When you enter the DAP configuration for a profile click on "Advanced" and there is the option to create a logical expression.  The guide (ther is a button to access this) is really helpful, with a couple of examples.  This is what i used:
assert(function()
   if ( (type(aaa.ldap.distinguishedName) == "string") and
        (string.find(aaa.ldap.distinguishedName, "OU=Users") ~= nil) )
then
       return true
   end
   return false
end)()
from the debug dap you can see what Users relates to;
DAP_TRACE: Username: MyUsername, aaa.ldap.distinguishedName = CN=Mr B,OU=Users,OU=Site ******,DC=CH,DC=Mycompany,DC=com
My admin account fails to get me in to the same profile:
DAP_TRACE: dap_add_to_lua_tree:aaa["ldap"]["distinguishedName"]="CN=Admin Mr B,OU=Admin Users,OU=Site *****,DC=CH,DC=Mycompany,DC=com"
Thanks
Andrew