Solved

adsi permission error

Posted on 2001-08-09
3
539 Views
Last Modified: 2008-02-01
I use adsi in an asp page to allow the authenticated user to add/remove other users to a group. The code works when the authenticated user is an administrator, but all other attempts generate this error:

Active Directory error '80070005'
General access denied error

It references the line executing the permission change:
GroupObj.Add ("WinNT://servername/username")

I tried making the authenticated user a power user but
still only admin works. How do I allow someone other than admin to use this function? Thanks
0
Comment
Question by:sac389
3 Comments
 
LVL 20

Accepted Solution

by:
Silvers5 earned 200 total points
ID: 6367815
you can't.. since an administrator can perform such tasks.. try to allow anonymous access an assign an administrator as the anonymous account.. you can set this in IIS.. this is an INTRANET I hope.. otherwise you'll need to create and encapsulate your code in a component, include it in COM+ and assign an admin account to run the package..
0
 
LVL 2

Expert Comment

by:ZhongYu
ID: 6367838
You must be aware what you are trying to do. In a NT computer only members in administrators group can add/remove user accounts. You have to include the users into this group.
0
 

Author Comment

by:sac389
ID: 6398113
Thanks for your thoughts. I figured out that the creator of the group can add and remove members even if the creator is not an administrator. So I could create the groups with that person. But I want multiple people to have the ability to add and remove from the group. I have read that power users should be able to add and remove members also, but haven't gotten this to work yet.  
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
UTC (timezone) without using an API 16 50
Select2 jquery help 9 95
Classic ASP - problem with MS SQL Select Query? 10 60
Designing forms 3 18
I would like to start this tip/trick by saying Thank You, to all who said that this could not be done, as it forced me to make sure that it could be accomplished. :) To start, I want to make sure everyone understands the importance of utilizing p…
I was asked about the differences between classic ASP and ASP.NET, so let me put them down here, for reference: Let's make the introductions... Classic ASP was launched by Microsoft in 1998 and dynamically generate web pages upon user interact…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question