LFCS · Question #604
How is the user user01 from DOMA granted the right to manage printers in the Samba print server?
The correct answer is B. net -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege. To grant a domain user the SePrintOperatorPrivilege for managing printers on a Samba server, the net rpc rights grant command is used, specifying the domain user and the privilege.
Question
Options
- Anet ads rights 'DOMA\user01' +SePrintOperatorPrivilege
- Bnet -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege
- Cpdbedit -user=user01 -I=DOMA -policies=SePrintOperatorPrivilege
- Dpdbedit DOMA\user01 +PrintOperator
- Ecupsaddsmb DOMA\user01 +PrintOperator
How the community answered
(27 responses)- A19% (5)
- B70% (19)
- D4% (1)
- E7% (2)
Why each option
To grant a domain user the `SePrintOperatorPrivilege` for managing printers on a Samba server, the `net rpc rights grant` command is used, specifying the domain user and the privilege.
The `net ads rights` command is used for managing Access Control Lists (ACLs) on Active Directory objects, not for directly granting specific server-wide privileges like `SePrintOperatorPrivilege` to users in the context of a Samba server. It also lacks the necessary authentication parameters for modifying privileges.
The `net rpc rights grant` command is the correct method for assigning specific Windows security privileges, such as `SePrintOperatorPrivilege` (Print Operator privilege), to a domain user within a Samba environment. The `-S server` and `-U domadmin` parameters are necessary to specify the target server and authenticate with administrative credentials to modify these domain rights.
`pdbedit` is a utility for managing local Samba user database entries (passdb) and does not handle the assignment of Windows domain privileges or policies to domain users.
`pdbedit` is for managing Samba user accounts, not for granting system-wide Windows privileges. The syntax `+PrintOperator` is also incorrect for the purpose of granting privileges with `pdbedit`.
`cupsaddsmb` is used to export CUPS-managed printers to the Samba print server, making them accessible to Windows clients, but it does not manage user privileges or grant operational rights.
Concept tested: Samba print operator rights management
Source: https://manpages.debian.org/testing/samba-common-bin/net.8.en.html
Topics
Community Discussion
No community discussion yet for this question.