Re: User objects cannot be created in the specified container

Hi Joe,

Thank you for replying. Yes. CN is a group object. This CN has a list
of members that are allowed to access my application. This
configuration is identical to other CNs used by other applications
like "Business Objects" in the organization.

Root --> OU1--> OU12--> CN (group)

1. If I point the connection to Root, every thing works fine. But this
would allow every one in the organization to access my application.
The goal is to restrict access to a group of users

2. If I point the LDAP connection to OU12, I am not getting the above
error. However provider's 'ValidateUser' method is returning false for
any member in the CN group. Either this method is not searching the
group or not finding the users in the group. I am using
sAMAccountName attribute.

3. If we put a test user directly under OU12 every thing works. Is
this the only way to configure AD to work with
ActiveDirectoyMembershipProvider? Using the groups under OUs seems to
be the reasonable option as this allows the admin to manage users
without worrying about different applications.

Thank you,
chand

.

Relevant Pages

  • Re: User objects cannot be created in the specified container
    ... CN is a group object. ... of members that are allowed to access my application. ... Unfortunately I don't have much control over the AD configuration. ... we put a test user directly under OU12 every thing works. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Need limited domain admin rights user account.
    ... I believe you are looking at the permission on the group object ... This is different from the members in the group, ... Domain Admins will have full control over the group while ...
    (microsoft.public.windows.server.security)
  • Re: HOW TO EXPORT FROM AD 2003 DISTRIBUTION LIST TO EXCEL
    ... The command line tools dsquery and dsget can be used to retrieve the ... ' Bind to group object, using Distinguished Name of the group. ... ' Use Members method to enumerate members of the group. ... a VBScript program can also write to an Excel Spreadsheet. ...
    (microsoft.public.windows.server.active_directory)
  • How to get users of a group
    ... I need to get all users that are members of a group. ... Problem is, looking at the properties of a group object, i can not find ... cn: Domain Users ... sAMAccountName: Domain Users ...
    (microsoft.public.windows.server.active_directory)
  • Re: Copy users from one group to a new group
    ... I need to copy members from a group to different global ... ' Bind to "source" group object, ... ' Enumerate direct members of source group. ... ' Check if this member already in target group. ...
    (microsoft.public.windows.server.active_directory)