samba - May 2005 - Printer Installation Issues on Win XP (Samba 3.0.10 as PDC)

Hi,

would be happy if somebody might help me with the following problem:

I installed Samba as the Primary DC -- works perfectly, XP clients can
join the domain, access the shares ...

The domain users's primary group is the "users" Unix group.
root is member of the "ntadmins" Unix group.

Mapped the Unix groups to NT groups as follows:
net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmins
net groupmap modify ntgroup="Domain Users"  unixgroup=users
net groupmap modify ntgroup="Domain Guests" unixgroup=nobody

When logged in as a *local user* at an XP client, there is no problem
installing a (CUPS) printer shared by Samba.

However, when logged in as a *domain user*, XP tells me that I don't
have sufficient rights to access that printer (I don't know what the
exact error message would be in an English XP, mine is German). The
error appears no matter if I'm logged in as a regular user or as root.

Any hint would be appreciated.

Thanks in advance,
Jan Werner

______________________________________
My smb.conf:

#======================= Global Settings
====================================[global]
logon script = default.bat
logon drive = H:
logon home = \\%N\%U
os level = 35
local master = yes
domain master = yes
domain logons = yes
   netbios name = SERVER
   workgroup = ABC
   server string = ABC Samba Server

bind interfaces only = yes
interfaces = eth0 

use client driver = yes
printcap name = /etc/printcap
load printers = yes
printer admin = @ntadmins, @users

add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/groupmod -A %u %g
delete user from group script = /usr/sbin/groupmod -R %u %g
add machine script = /usr/sbin/useradd -s /bin/false -d
/var/lib/nobody %u



max log size = 50
   security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
utmp = yes

# WINS / VPN
# ----------

preferred master = yes
wins support = yes

#============================ Share Definitions
=============================
   idmap uid = 15000-20000
   idmap gid = 15000-20000
   template shell = /bin/false
   winbind use default domain = no

[printers]
printing = cups
print command = lpr -r -P%p -o raw %s
printer admin = @ntadmins, @users
use client driver = yes
browseable = yes
printable = yes
public = yes
guest ok = yes

[print$]
comment = Printer Driver Share
path = /home/ntadmin/prndrv
write list = @ntadmins, @users
printer admin = @ntadmins, @users


[homes]
read only = no
browseable = no


[netlogon]
comment = Network Logon
path = /home/ntadmin/netlogon
read only = yes
write list = ntadmin


[shared]
comment = Shared Folder
path = /home/shared
browseable = yes
guest only = yes
writable = yes
public = yes