Re: Unable to re-activate a deleted user using ldp.exe

From: Dmitri Gavrilov [MSFT] (dmitrig_at_online.microsoft.com)
Date: 07/01/04


Date: Wed, 30 Jun 2004 21:45:59 -0600

Looks like you are hitting this
http://support.microsoft.com/default.aspx?scid=KB;EN-US;830769
There's a hotfix.

-- 
Dmitri Gavrilov
SDE, Active Directory Core
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Duncan" <anonymous@discussions.microsoft.com> wrote in message
news:2391f01c45e94$b28f19f0$a501280a@phx.gbl...
> Hi,
>
> We have 2 W2K3 domain controllers replicating on our
> domain. Last night I uninstalled IIS from one of them and
> the IIS_WPG user account has been deleted. This has
> prevented the IIS service from running on the other domain
> controller as the AD info has been replicated. Therefore I
> am wanting to re-activate the IIS_WPG user account.
>
> I followed KB article 840001, more specifically I am
> following the section on "How to manually undelete objects
> in a deleted objects container" using ldp.exe
>
> I keep getting the following error when I run the app:
>
> ***Call Modify...
> ldap_modify_ext_s(ld, 'CN=IIS_WPG\0ADEL:caeb82ec-2646-457b-
> 8be6-b89edf55c60a,CN=Deleted Objects,DC=centradia,DC=com',
> [2] attrs, SvrCtrls, ClntCtrls);
> Error: Modify: Unwilling To Perform. <53>
> Server error: 0000001F: SvcErr: DSID-031A0FBC, problem
> 5003 (WILL_NOT_PERFORM), data 0
>
>
> On running the app and having successfully bound to the
> W2K3 server I can see the user listed in the Deleted
> Objects container and in the right-hand pane I can confirm
> that the deletion took place at around the time IIS was
> uninstalled.
>
> Can you help me restore this user or will I have to re-
> install IIS?
>
> Many thanks,
>
> Duncan


Relevant Pages

  • Re: Unable to access website on IIS 5.1 anonymously
    ... I turned off the "show Friendly HTTP Errors and it gives ... >IUSR and IIS to match and I still get the Access Error. ... >user account, set it ... >>as Anonymous User in IIS, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to access website on IIS 5.1 anonymously
    ... What happens if you uncheck "Allow IIS to control password" on the Anonymous ... User account, physically synchronize the account and password (i.e. go to ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to access website on IIS 5.1 anonymously
    ... messing with ACLs because it'll probably make things worse. ... IUSR and IIS to match and I still get the Access Error. ... user account, set it ... >Anonymous user account in IIS". ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS permissions settings question
    ... then IIS still needs to impersonate a user account in order ... file access must be in the context of some Windows user account. ... account called IUSR_<webservername> on the remote server. ...
    (microsoft.public.inetserver.iis)
  • Re: Unable to re-activate a deleted user using ldp.exe
    ... Duncan wrote: ... Last night I uninstalled IIS from one of them and ... > prevented the IIS service from running on the other domain ... > Objects container and in the right-hand pane I can confirm ...
    (microsoft.public.windows.server.active_directory)

Loading