Solved

Do I need Write access in AD users and computers for a group and certain user accounts to update the AD account object in my code?

Posted on 2014-12-17
3
125 Views
Last Modified: 2014-12-17
Hi,
I'm using VS2012, asp.net and C#.
I right click for property in AD U&C snapin on certain users and security group(user group) and I don't see the service account id that I'm using has write access to them.  Do I need to request our network admin to grant that service account that access before I can use ldap to update those account attribute information?
Thank you.
0
Comment
Question by:lapucca
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 37

Accepted Solution

by:
Neil Russell earned 250 total points
ID: 40505506
To make any changes inside AD you need to have the account delegated the correct permissions by a domain/Enterprise admin.
Otherwise Anybody could just change what they like, not a good move.
0
 
LVL 14

Assisted Solution

by:Ben Hart
Ben Hart earned 250 total points
ID: 40505507
If you are making changes to an object within AD for any reason or using any method (such as code) you will need the appropriate permissions. If you know the level of access you need and if it's on specific items such as an OU, or Security Group then your admin can delegate down to a fairly granular level without giving your code more rights than it needs.
0
 

Author Closing Comment

by:lapucca
ID: 40505550
Thank you.
0

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question