Unauthenticated access to printers with Samba

I am trying to enable guest access to printers shared via Samba from a machine authenticating using Centrify. The problem I run into is that I can't set up the printer on a windows machine without entering a valid domain user name. I've tried variations on "map to guest," and the error changes, but it still doesn't work. I also want to have shares on the same server that ARE authenticated, but right now I can't even get this simple setup to work. Any hints? Thanks.

[global]
    security = ADS
    realm = my.realm
    workgroup = mydomain
    netbios name = mymachine
    auth methods = guest, sam, winbind, ntdomain
    machine password timeout = 0
    passdb backend = tdbsam:/var/lib/samba/private/passdb.tdb
    kerberos method = secrets and keytab
    server signing = auto
    client ntlmv2 auth = yes
    client use spnego = yes
    template shell = /bin/bash
    winbind use default domain = Yes
    winbind enum users = No
    winbind enum groups = No
    winbind nested groups = Yes
    idmap cache time = 0
    idmap config * : backend  = tdb
    idmap config * : range = 1000 - 200000000
    idmap config * : base_tdb = 0
    enable core files = false
    idmap config * : base_tdb = 0
    enable core files = false
    wins server = 10.0.0.1
    guest ok = yes
    browseable = yes
    map to guest = Bad Uid
[TEST-PRINT]
        printer name = CupsPrinter
        printable = yes
        guest ok = yes
        read only = yes
        printing = cups
        path = /var/spool/samba