Solved

Do I need Write access in AD users and computers for a group and certain user accounts to update the AD account object in my code?

Posted on 2014-12-17
3
123 Views
Last Modified: 2014-12-17
Hi,
I'm using VS2012, asp.net and C#.
I right click for property in AD U&C snapin on certain users and security group(user group) and I don't see the service account id that I'm using has write access to them.  Do I need to request our network admin to grant that service account that access before I can use ldap to update those account attribute information?
Thank you.
0
Comment
Question by:lapucca
3 Comments
 
LVL 37

Accepted Solution

by:
Neil Russell earned 250 total points
ID: 40505506
To make any changes inside AD you need to have the account delegated the correct permissions by a domain/Enterprise admin.
Otherwise Anybody could just change what they like, not a good move.
0
 
LVL 14

Assisted Solution

by:Ben Hart
Ben Hart earned 250 total points
ID: 40505507
If you are making changes to an object within AD for any reason or using any method (such as code) you will need the appropriate permissions. If you know the level of access you need and if it's on specific items such as an OU, or Security Group then your admin can delegate down to a fairly granular level without giving your code more rights than it needs.
0
 

Author Closing Comment

by:lapucca
ID: 40505550
Thank you.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question