LFCS Question #604: Real Exam Question with Answer & Explanation

Question

How is the user user01 from DOMA granted the right to manage printers in the Samba print server?

Options

• Anet ads rights 'DOMA\user01' +SePrintOperatorPrivilege
• Bnet -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege
• Cpdbedit -user=user01 -I=DOMA -policies=SePrintOperatorPrivilege
• Dpdbedit DOMA\user01 +PrintOperator
• Ecupsaddsmb DOMA\user01 +PrintOperator

Explanation

To grant a domain user the SePrintOperatorPrivilege for managing printers on a Samba server, the net rpc rights grant command is used, specifying the domain user and the privilege.

Common mistakes.

• A. The net ads rights command is used for managing Access Control Lists (ACLs) on Active Directory objects, not for directly granting specific server-wide privileges like SePrintOperatorPrivilege to users in the context of a Samba server. It also lacks the necessary authentication parameters for modifying privileges.
• C. pdbedit is a utility for managing local Samba user database entries (passdb) and does not handle the assignment of Windows domain privileges or policies to domain users.
• D. pdbedit is for managing Samba user accounts, not for granting system-wide Windows privileges. The syntax +PrintOperator is also incorrect for the purpose of granting privileges with pdbedit.
• E. cupsaddsmb is used to export CUPS-managed printers to the Samba print server, making them accessible to Windows clients, but it does not manage user privileges or grant operational rights.

Concept tested. Samba print operator rights management

Reference. https://manpages.debian.org/testing/samba-common-bin/net.8.en.html

No community discussion yet for this question.