The command

    groups "DOMAIN\myADaccount"

will give you the groups of which 'myADaccount' is a member.
'domain admins' needs to be one of them if that account is to grant rights.

Dale


On 08/02/2010 2:44 AM, Frédéric SOSSON wrote:
User myADaccount has full rights on domain\user is it enough to grant
SePrintOperatorPrivilege ?

2010/7/30 Dale Schroeder<[email protected]>:
  Is 'myADaccount' a domain admin capable of granting rights?
Perhaps give us the global section of your smb.conf.

I have no experience with win2008, so if that's the problem, I have nothing
to offer there.

Dale


On 07/30/2010 4:54 AM, Frédéric SOSSON wrote:
Hi,

when I try run

# net -S myDC -U myADaccount rpc rights grant 'domain\user'
SePrintOperatorPrivilege
Password

I got

Failed to grant privileges for domain\user (NT_STATUS_INVALID_PARAMETER)

My domain controller is Windows2008R2 (windows 2000 domain runlevel)

any idea?


regards,

2010/7/29 Dale Schroeder<[email protected]>:
  See SePrintOperatorPrivilege in:

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html

Dale

On 07/29/2010 9:35 AM, Frédéric SOSSON wrote:
Hello,

I would like to upload windows printer driver to my Samba through the
printer "Advanced tab" as described in that doc
http://www.samba.org/samba/docs/man/Samba-Guide/happy.html#id2582657
but this tab is totally grayed.  I can imagine it's a permission issue
but I'm not sure at all.

Any idea,

Frederic
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to