LX0-104 · Question #604
How is the user user01 from DOMA granted the right to manage printers in the Samba print server?
The correct answer is B. net -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege. To grant printer management rights to a domain user in Samba, the net rpc rights grant command is used with the specific privilege.
Question
Options
- Anet ads rights 'DOMA\user01' +SePrintOperatorPrivilege
- Bnet -S server -U domadmin rpc rights grant 'DOMA\user01' SePrintOperatorPrivilege
- Cpdbedit -user=user01 -I=DOMA -policies=SePrintOperatorPrivilege
- Dpdbedit DOMA\user01 +PrintOperator
- Ecupsaddsmb DOMA\user01 +PrintOperator
How the community answered
(33 responses)- A12% (4)
- B82% (27)
- C3% (1)
- E3% (1)
Why each option
To grant printer management rights to a domain user in Samba, the `net rpc rights grant` command is used with the specific privilege.
The `net ads rights` command is used for Active Directory specific rights management, not for granting Windows privileges in a Samba domain directly in this manner for printer operations.
The `net rpc rights grant` command is used to manage specific Windows privileges for users or groups within a Samba domain. `SePrintOperatorPrivilege` is the correct privilege name for granting a user the right to manage printers, and `DOMA\user01` specifies the user in the domain. The `-S server -U domadmin` parts indicate connecting to a specific server as a domain administrator to perform the operation.
`pdbedit` is used for managing the Samba local user database, not for granting Windows privileges to domain users.
`pdbedit` is used for managing the Samba local user database, and `+PrintOperator` is not a valid syntax for granting privileges via `pdbedit`.
`cupsaddsmb` is used for exporting CUPS printer drivers to Samba, not for granting printer management rights to users.
Concept tested: Samba domain user privilege management
Source: https://www.samba.org/samba/docs/current/manpages/net.8.html
Topics
Community Discussion
No community discussion yet for this question.