[Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

[Adam Nielsen]

> The samba host is a domain member server (security=ADS) with winbind for
> user accounts.   Where is this user rights database stored and what is
> the tool to assign admin privileges?

I'm sure the privilege is stored in AD, which means you will need an AD
account with write access to the testpc1 object.

> # /usr/local/samba/bin/net rpc rights grant testpc1
> SePrintOperatorPrivilege -U testpc1
> Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)

This means you're connecting as the user "testpc1" which doesn't have
access.  Machine accounts normally don't have much access at all.
You'll need to use an account that has been delegated admin access to
testpc1 instead.

Cheers,
Adam.