Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Getting Errors importing from CVS file

Posted on 2009-02-11
10
Medium Priority
?
3,236 Views
Last Modified: 2012-05-06
Getting this error after i run the script, any ideas why, i assume that its because i dont have admin rights on the domain controller, but i can run and export but not an import  ?
Connecting to "dxxxxxxx.xx.xx.xx.com"
Logging in as current user using SSPI
Importing directory from file "Import.csv"
Loading entries.
Add error on line 2: Unwilling To Perform
The server side error is "Access to the attribute is not permitted because the a
ttribute is owned by the Security Accounts Manager (SAM)."
0 entries modified successfully.
An error has occurred in the program
No log files were written.  In order to generate a log file, please
specify the log file path via the -j option.

Open in new window

0
Comment
Question by:cgooden01
  • 6
  • 4
10 Comments
 
LVL 15

Expert Comment

by:HayesJupe
ID: 23610948
reading and writing to AD are very diffetrent permissions levels...
csvde additionally cannot import all AD properties.... although it is more likely to be the first.
what properties are you trying to import?
0
 

Author Comment

by:cgooden01
ID: 23670252
Just trying to import DN,objectClass,SAMAccountName
0
 
LVL 15

Expert Comment

by:HayesJupe
ID: 23674974
geez.. ok, well thats very basic... and it will work assuming you have permission and there is not an existing object with the same name...
could you turn on logging with the -j option and provide that for us?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:cgooden01
ID: 23678512
yeah, i thought that wouldnt be an issue as well.  when running CSVDE import, do you have to be an administrator to the DC to write to it.  I have access by all other means, as a syst ad. Can export from it, but cant write to it. Is this the reason, because i have no rights to write to the SAMS database.  Tried the -J option, but no logs anywhere.????????
0
 
LVL 15

Expert Comment

by:HayesJupe
ID: 23678562
the log will be created where you define the log to be created....
And yes, you'll need to have the approriate rights to AD to create accounts (ie account operators or above)
0
 

Author Comment

by:cgooden01
ID: 23679595
Ill try that again, because i have full rights to create accounts and everything within my OU, but everytime when i go to import the csvde file, i get this error., Ill post my results.  Thanks
0
 

Author Comment

by:cgooden01
ID: 23681120
This is the errors from the logs that remains, any help.
Loading entries
2: CN=Doe\, John A.,OU=Test,OU=Users,OU=ROC,OU=2nd MI,OU=xx,OU=xxx,DC=xx,DC=xx,DC=xx,DC=xx
Add error on line 2: Unwilling To Perform
The server side error is "Access to the attribute is not permitted because the attribute is owned by the Security Accounts Manager (SAM)."
0 entries modified successfully.
An error has occurred in the program
0
 

Author Comment

by:cgooden01
ID: 23681304
I see where the error lie, there is an entry(object) already in the SAMs Database with alot of my users, so therefore, it can not overwrite it since it already exist.  
0
 
LVL 15

Accepted Solution

by:
HayesJupe earned 750 total points
ID: 23682223
yep, thats it.... you can overwrite certain properties with CSVDE.
0
 

Author Closing Comment

by:cgooden01
ID: 31545496
Thanks for pointing me in the right direction, it was right in my face, but just didnt see it til I added the -j prefix.  Thanks again
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's recap what we learned from yesterday's Skyport Systems webinar.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
The viewer will learn the basics of jQuery, including how to invoke it on a web page. Reference your jQuery libraries: (CODE) Include your new external js/jQuery file: (CODE) Write your first lines of code to setup your site for jQuery.: (CODE)
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question