[Samba] setdriver - Access Denied

[James Watkins]

Hi, I'm trying to follow through the printing howto and I'm having a bit 
of a nightmare trying to use the rpcclient -c 'setdriver ...' utility. 
I keep getting WERR_ACCESS_DENIED errors. I tried setting up a root user 
with smbpasswd but I get NT_STATUS_LOGON_FAILURE if I try to run 
rpcclient with -U root. I think there must be something fundamental to 
authentication that I don't understand. Also, I noticed that testparm 
reports the 'printer admin' option as being deprecated, does anyone know 
what the preferred method for implementing printer admin privileges is?

Any help would be gratefully appreciated,

Thanks,
James.

OS - linux (opensuse 10.0)
kernel - 2.6.13
samba - 3.0.20-4

smb.conf:


[global]

## Domain Info

	workgroup		= M2
	security		= domain
	encrypt passwords	= yes
	domain master		= no
	domain logons		= no
	passdb backend		= smbpasswd
	enable privileges	= yes

## User mapping / acl behaviour

	idmap uid		= 10000-20000
	idmap gid		= 10000-20000
#	map to guest		= Bad User
	force unknown acl user	= yes
	acl group control	= yes
	map acl inherit		= yes
	inherit owner		= yes

## Logon

	logon home		= \\%L\%U\.9xprofile
	logon drive		= P:
	logon path		= \\%L\profiles\.msprofile

## Scripts

	add share command	= /usr/lib/samba/scripts/addshare
	add machine script	= /usr/sbin/useradd -c Machine -d /var/lib/nobody -s 
/bin/false %m$


## Printing

	load printers		= yes
	printing		= cups
	printcap name		= cups
	cups options		= raw
	printcap cache time	= 750

## Includes

	include			= /etc/samba/dhcp.conf




## Section - [test]
[test]
	readonly		= no
	comment			=
	inherit acls		= yes
	path			= /srv/smb/test

## Section - [printers]
[printers]
	create mask		= 0600
	comment			= All Printers
	browseable		= no
	public			= yes
	printable		= yes
	path			= /var/spool/samba
	printer admin		= root, @ntadmin
	use client driver       = yes

## Section - [print$]
[print$]
	create mask		= 0664
	directory mask		= 0775
	comment			= Printer Drivers
	path			= /var/lib/samba/drivers
	force group		= ntadmin
	write list		= @ntadmin root

## Section - [homes]
[homes]
	readonly		= no
	comment			= Home Directories
	browseable		= no
	inherit acls		= yes
	valid users		= %S

## Section - [IT]
[IT]
	comment			= Comment
	path			= /srv/smb/test//IT
	read only		= no

## Section - [profiles]
[profiles]
	read only		= no
	create mask		= 0600
	directory mask		= 0700
	comment			= Network Profiles Service
	store dos attributes	= yes
	path			= %H