Solved

Do I need Write access in AD users and computers for a group and certain user accounts to update the AD account object in my code?

Posted on 2014-12-17
3
118 Views
Last Modified: 2014-12-17
Hi,
I'm using VS2012, asp.net and C#.
I right click for property in AD U&C snapin on certain users and security group(user group) and I don't see the service account id that I'm using has write access to them.  Do I need to request our network admin to grant that service account that access before I can use ldap to update those account attribute information?
Thank you.
0
Comment
Question by:lapucca
3 Comments
 
LVL 37

Accepted Solution

by:
Neil Russell earned 250 total points
ID: 40505506
To make any changes inside AD you need to have the account delegated the correct permissions by a domain/Enterprise admin.
Otherwise Anybody could just change what they like, not a good move.
0
 
LVL 14

Assisted Solution

by:Ben Hart
Ben Hart earned 250 total points
ID: 40505507
If you are making changes to an object within AD for any reason or using any method (such as code) you will need the appropriate permissions. If you know the level of access you need and if it's on specific items such as an OU, or Security Group then your admin can delegate down to a fairly granular level without giving your code more rights than it needs.
0
 

Author Closing Comment

by:lapucca
ID: 40505550
Thank you.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A long time ago (May 2011), I have written an article showing you how to create a DLL using Visual Studio 2005 to be hosted in SQL Server 2005. That was valid at that time and it is still valid if you are still using these versions. You can still re…
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now