Re: Error in ADAM when binding as a ADAM Principal

From: Dmitri Gavrilov [MSFT] (dmitrig_at_online.microsoft.com)
Date: 03/09/04 

Date: Tue, 9 Mar 2004 11:38:41 -0800

Very good thought to post the audit.
0xC0000072 is STATUS_ACCOUNT_DISABLED.

You must have created a user without a password, which did not meet the pwd
policy requirements. This resulted in creation of a disabled user. You have
to set a password, then reset the msDS-userAccountDisabled flag. Note
passwords can only be set on an encrypted connection (either SSL or
LDAP_OPT_ENCRYPT=1). 

-- 
Dmitri Gavrilov
SDE, Active Directory Core
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Bill Scherer" <anonymous@discussions.microsoft.com> wrote in message
news:99ab01c40602$40dbbba0$a001280a@phx.gbl...
> I created an administrative account within ADAM and added
> it to the cn=Administrators group under my application
> directory partition.
> I tried to bind to ADAM using this account within ldp and
> received the following error in the Audit event log (ADAM
> logging diagnostics was turned up to "4" in the Registry):
>
> Failure Audit
> Event ID 680
> Category: Account Logon
> User: <A SID>
> Logon attempted by: ADAM_<ADAM Instance name>
> Logon account: <DN of the account I created that is in the
> Administrator group>
> Source Workstation: -
> Error Code: 0xC0000072
>
> ldp reports the following error:
> res=ldap_simple_bind_s(Id, '<dn of the account I created
> that is in the administrator group>', <unavailable>)//v.3
> Error <49>: ldap_simple_bind_s() failed: Invalid
> Credentials
> Server error: <empty>
>
> My ADAM server is a member server in a domain and does
> have group policy set pretty strictly.  I can successfully
> bind when I use a domain administrator account and check
> the "Domain" checkbox.
>
> Any ideas?
> Thank you,
> Bill
>
>

Relevant Pages

  • Re: ADAM Security Logging
    ... so if you look at the effective local security policy on the ADAM ... "Audit account management". ... account "Generate security audits" right in User Rights Assignment ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Security Logging
    ... so if you look at the effective local security policy on the ADAM ... "Audit account management". ... account "Generate security audits" right in User Rights Assignment ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Security Logging
    ... the User column of the ADAM instance event log for a native ADAM ... To get a security log audit when a native ADAM user connects to ... > return a limited number of entries per query. ... This works great when an AD account ran the query, ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM and Windows Address Book
    ... credentials instead of a fixed service account. ... it is a special LDAP control supported by AD and ADAM ... If I couldn't make it work for WAB, ... credentials in the WAB settings in order to authenticate. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM SP1 on Win2K3 SP1
    ... To use a domain user account as the ADAM service account for SSL communication, I have to request server authentication certificate using that account. ...
    (microsoft.public.windows.server.active_directory)
Loading