[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2306
  • Last Modified:

ADModify.net syntax errors when modifying an attribute in Server 2008 x64.

Hi guys,

I am trying to remove some unwanted values from peoples AD accounts due to a botched migration of user data from Server 2003 32bit to Server 2008 64bit.

(I am afraid I don't currently have answers for how or what was used to migrate the user data as consultants were brought in for the whole job)

I am using ADModify.net v.2.1

I have used AdModify.net in the past to successfully bulk modify AD records but I am not having any luck with this task on the new servers.

I am doing a custom query for the value 'dn' which has polluted the 'ipPhone' attribute of peoples AD records. It is successfully returning all the expected accounts but when I try to remove the value but putting a tick in the box next to the ipPhone attribute, leaving the value field blank and update the changes, I get the following error with every user account I have selected to modify.

<user message="ADMODIFY.ERR - The attribute syntax specified to the directory service is invalid. " attribute="ipPhone" type="Failure" UserDN="LDAP://CN=Joe Blogss,OU=Staff,OU=Domain Users,DC=company,DC=local"/>

Open in new window


I cant have a blank 'ipPhone' attribute??

Or is there some other security restriction I am not aware of that is preventing ADModify from making the changes?
0
defecta
Asked:
defecta
  • 4
  • 3
  • 2
1 Solution
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
You have an attribute Iphone in AD on user properties ?
What value are you trying to provide and what doe sit does ?

- Rancy
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Hope you are using the Custom tab to make changes to this custom Attribute :)

- Rancy
0
 
defectaAuthor Commented:
Thanks or the heads up folks. I had no idea it was a custom attribute. It was just an attribute that existed on the old accounts and has been imported to the new servers.

On the telephone tab for AD user accounts there is a field called IP Phone, which we have been using to record the users Skype account name.

I have a VB script the runs at login which generates the company signature using their AD account attributes. EG, title, dept, address, phones etc.

Since the migration some genius has put the value 'dn' in a lot of black fields which has meant that the signature script is giving people Skype addresses of 'dn' when it should even be added to their signature if it was blank like I intended.

I will check out this Custom tab you speak of now.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
defectaAuthor Commented:
yeah, that custom tab doesn't apply to this situation.

custom tab
As you can see by the explanation in the Custom tab above, that isn't going to work because the attribute already exists on the Telephone tab. See below.

telephone tab.
Any other ideas people?
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
We need to use the Custom ... if you could share a screen of users tab for Iphone :)

- Rancy
0
 
Krzysztof PytkoActive Directory EngineerCommented:
You cannot leave field blank to clear its value. There is special value needed to place there :)
Check what will happen if you place there null as the new value :D

That's the way to clear attributes in ADModify.net

Regards,
Krzysztof
1
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Attribute Value – “null” (TYPE null without quotes)

http://restartis.wordpress.com/2009/05/14/multiple-users-with-legacyexchangedn-set-to-adcdisabledmail/

- Rancy
1
 
defectaAuthor Commented:
Thank you! That worked.

( RTFM?! =P )
0
 
Krzysztof PytkoActive Directory EngineerCommented:
You're welcome :)

Krzysztof
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 4
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now