[Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

[Ryan Suarez]

my smb.conf:
http://pastebin.ca/1554626

Ryan Suarez wrote:
> RE: "net rpc rights grant testpc1 SePrintOperatorPrivilege -U testpc1"
> Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
>
> samba_source_3.3.7 on redhat 5 64bit.  I have root on the samba server 
> but I don't have admin access to active directory (hence the auth 
> using testpc1).
>
> Does the user granting access need some sort of admin privilege in 
> Active Directory? How do I grant this privilege on this samba host 
> (for which I have root) since I don't have admin access in Active 
> Directory?