[Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

[Ryan Suarez]

>>>> Does the user granting access need some sort of admin privilege in
>>>> Active Directory? How do I grant this privilege on this samba host
>>>> (for which I have root) since I don't have admin access in Active
>>>> Directory?
>>>>         
>
> Yes, if you want to change an object in Active Directory you will need
> access to do so.  Unless your Samba host *is* the AD server, nothing
> gets granted on the PC itself, all the permissions are maintained within AD.
>   

hmm, the best option for me is to ask the AD administrator to grant the 
samba SePrintOperatorPrivilege directly to the user object in Active 
Directory.  Where is this added in AD and what is this privilege called?

thanks,
Ryan