Solved

adsi permission error

Posted on 2001-08-09
3
538 Views
Last Modified: 2008-02-01
I use adsi in an asp page to allow the authenticated user to add/remove other users to a group. The code works when the authenticated user is an administrator, but all other attempts generate this error:

Active Directory error '80070005'
General access denied error

It references the line executing the permission change:
GroupObj.Add ("WinNT://servername/username")

I tried making the authenticated user a power user but
still only admin works. How do I allow someone other than admin to use this function? Thanks
0
Comment
Question by:sac389
3 Comments
 
LVL 20

Accepted Solution

by:
Silvers5 earned 200 total points
ID: 6367815
you can't.. since an administrator can perform such tasks.. try to allow anonymous access an assign an administrator as the anonymous account.. you can set this in IIS.. this is an INTRANET I hope.. otherwise you'll need to create and encapsulate your code in a component, include it in COM+ and assign an admin account to run the package..
0
 
LVL 2

Expert Comment

by:ZhongYu
ID: 6367838
You must be aware what you are trying to do. In a NT computer only members in administrators group can add/remove user accounts. You have to include the users into this group.
0
 

Author Comment

by:sac389
ID: 6398113
Thanks for your thoughts. I figured out that the creator of the group can add and remove members even if the creator is not an administrator. So I could create the groups with that person. But I want multiple people to have the ability to add and remove from the group. I have read that power users should be able to add and remove members also, but haven't gotten this to work yet.  
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Have you ever needed to get an ASP script to wait for a while? I have, just to let something else happen. Or in my case, to allow other stuff to happen while I was murdering my MySQL database with an update. The Original Issue This was written…
This demonstration started out as a follow up to some recently posted questions on the subject of logging in: http://www.experts-exchange.com/Programming/Languages/Scripting/JavaScript/Q_28634665.html and http://www.experts-exchange.com/Programming/…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question