Solved

Do I need Write access in AD users and computers for a group and certain user accounts to update the AD account object in my code?

Posted on 2014-12-17
3
119 Views
Last Modified: 2014-12-17
Hi,
I'm using VS2012, asp.net and C#.
I right click for property in AD U&C snapin on certain users and security group(user group) and I don't see the service account id that I'm using has write access to them.  Do I need to request our network admin to grant that service account that access before I can use ldap to update those account attribute information?
Thank you.
0
Comment
Question by:lapucca
3 Comments
 
LVL 37

Accepted Solution

by:
Neil Russell earned 250 total points
ID: 40505506
To make any changes inside AD you need to have the account delegated the correct permissions by a domain/Enterprise admin.
Otherwise Anybody could just change what they like, not a good move.
0
 
LVL 14

Assisted Solution

by:Ben Hart
Ben Hart earned 250 total points
ID: 40505507
If you are making changes to an object within AD for any reason or using any method (such as code) you will need the appropriate permissions. If you know the level of access you need and if it's on specific items such as an OU, or Security Group then your admin can delegate down to a fairly granular level without giving your code more rights than it needs.
0
 

Author Closing Comment

by:lapucca
ID: 40505550
Thank you.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
The article shows the basic steps of integrating an HTML theme template into an ASP.NET MVC project
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question