|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Can't programatically create a Domain groupI have a windows 2k3 server (Euclid) that belongs to a w2k active directory (BudTest is the server, budtest.com is the domain). The service I wrote in VB.Net to run on Euclid has to create new groups on budtest.com. I copied the code from the microsoft web site: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adam/adam/creating_groups.asp The only change I made was to the LDAP address. I was able to do Children.Find() and get a response, so I'm pretty sure my LDAP address is right. When I run it, when the code reaches the objGroup.CommitChanges line, it throws an exception. With a little digging, I got "The server is unwilling to process the request." My service runs under a domain account. I delegated control of the appropriat OU to the account, and I even tried adding the account to the domain administrators. Still nothing. After google-ing the problem, it seems that the error message is a generic response from the AD. I don't suppose anyone can tell me what could be going on that the off-the-shelf solution would throw errors? Thanks in advance Buddy Robbins Please don't multi-post. I answered your question in a different newsgroup.
Joe K. Show quoteHide quote "Buddy Robbins" <BuddysSpam@hotmail.com> wrote in message news:O$7xZDzSFHA.3548@TK2MSFTNGP10.phx.gbl... > Folks, > I have a windows 2k3 server (Euclid) that belongs to a w2k active > directory (BudTest is the server, budtest.com is the domain). > The service I wrote in VB.Net to run on Euclid has to create new groups > on budtest.com. > > I copied the code from the microsoft web site: > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adam/adam/creating_groups.asp > The only change I made was to the LDAP address. I was able to do > Children.Find() and get a > response, so I'm pretty sure my LDAP address is right. > > When I run it, when the code reaches the objGroup.CommitChanges line, it > throws an exception. > With a little digging, I got "The server is unwilling to process the > request." > > My service runs under a domain account. I delegated control of the > appropriat OU to the account, and I even tried adding the account to the > domain administrators. Still nothing. > > After google-ing the problem, it seems that the error message is a generic > response from the AD. > > I don't suppose anyone can tell me what could be going on that the > off-the-shelf solution would throw errors? > > Thanks in advance > > Buddy Robbins > > >
EventLogPermission via caspol.exe
Creating User Accounts with or without Active Directory Event Log Write access under ASP.NET Upgrading Encryption to .Net not Working!!!!!!! Access denied with interop Code Source Security How to share a Principal within a ThreadPool ? Very slow Principal.IsInRole call... CredUIConfirmCredentials behaves unexpectedly Strong-Name Assembly calling WebService |
|||||||||||||||||||||||