nerdexam
Linux_Foundation

LFCS · Question #604

How is the user user01 from DOMA granted the right to manage printers in the Samba print server?

The correct answer is B. net -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege. To grant a domain user the SePrintOperatorPrivilege for managing printers on a Samba server, the net rpc rights grant command is used, specifying the domain user and the privilege.

Submitted by haruto_sh· Apr 18, 2026User and Group Management

Question

How is the user user01 from DOMA granted the right to manage printers in the Samba print server?

Options

  • Anet ads rights 'DOMA\user01' +SePrintOperatorPrivilege
  • Bnet -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege
  • Cpdbedit -user=user01 -I=DOMA -policies=SePrintOperatorPrivilege
  • Dpdbedit DOMA\user01 +PrintOperator
  • Ecupsaddsmb DOMA\user01 +PrintOperator

How the community answered

(27 responses)
  • A
    19% (5)
  • B
    70% (19)
  • D
    4% (1)
  • E
    7% (2)

Why each option

To grant a domain user the `SePrintOperatorPrivilege` for managing printers on a Samba server, the `net rpc rights grant` command is used, specifying the domain user and the privilege.

Anet ads rights 'DOMA\user01' +SePrintOperatorPrivilege

The `net ads rights` command is used for managing Access Control Lists (ACLs) on Active Directory objects, not for directly granting specific server-wide privileges like `SePrintOperatorPrivilege` to users in the context of a Samba server. It also lacks the necessary authentication parameters for modifying privileges.

Bnet -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilegeCorrect

The `net rpc rights grant` command is the correct method for assigning specific Windows security privileges, such as `SePrintOperatorPrivilege` (Print Operator privilege), to a domain user within a Samba environment. The `-S server` and `-U domadmin` parameters are necessary to specify the target server and authenticate with administrative credentials to modify these domain rights.

Cpdbedit -user=user01 -I=DOMA -policies=SePrintOperatorPrivilege

`pdbedit` is a utility for managing local Samba user database entries (passdb) and does not handle the assignment of Windows domain privileges or policies to domain users.

Dpdbedit DOMA\user01 +PrintOperator

`pdbedit` is for managing Samba user accounts, not for granting system-wide Windows privileges. The syntax `+PrintOperator` is also incorrect for the purpose of granting privileges with `pdbedit`.

Ecupsaddsmb DOMA\user01 +PrintOperator

`cupsaddsmb` is used to export CUPS-managed printers to the Samba print server, making them accessible to Windows clients, but it does not manage user privileges or grant operational rights.

Concept tested: Samba print operator rights management

Source: https://manpages.debian.org/testing/samba-common-bin/net.8.en.html

Topics

#Samba Administration#Printer Management#User Rights#Domain Integration

Community Discussion

No community discussion yet for this question.

Full LFCS Practice