Re: LookupAccountName fails with error 1332

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 08/09/05 

Date: Mon, 8 Aug 2005 17:10:50 -0500

Does it work with the full name, "BUILTIN\Server Operators"?

I'm not sure why Administrators would work without that, but who knows...

Joe K.

"Matt" <anonmous@nospam.nospam> wrote in message
news:79BFB6C1-2B76-40BB-8538-093682E04EDD@microsoft.com...
> Joe,
> Thanks for your response. That was my initial thought as well.
> However,
> the documentation for LookupAccountName states the following regarding the
> lpSystemName parameter (which is NULL in my case):
>
> If this string is NULL, the account name translation begins on the local
> system. If the name cannot be resolved on the local system, this function
> will try to resolve the name using domain controllers trusted by the local
> system.
>
> The way this reads to me is that if the local security authority cannot
> resolve it, it will try the domain controller.
>
> Matt
>
>
> "Joe Richards [MVP]" wrote:
>
>> I would guess that you aren't asking a machine that knows what server
>> operators
>> is. This name could only be resolved on a domain controller.
>>
>> --
>> Joe Richards Microsoft MVP Windows Server Directory Services
>> www.joeware.net
>>
>>
>> Matt wrote:
>> > Hello,
>> > LookupAccountName fails with error '1332' whenever I use "Server
>> > Operators" as the lpAccountName argument. This call fails on both
>> > Windows
>> > 2000 Server SP2 and SP3 systems. The same code handles
>> > "Administrators" and
>> > "System" for example with no problem.
>> >
>> > Thanks,
>> >
>> > Matt
>>

Relevant Pages

  • Re: Cant delete a corrupt user object
    ... Thanks Joe. ... If you find the deleted user on any of ... Joe Richards Microsoft MVP Windows Server Directory Services ... This is also on the Primary Domain Controller ...
    (microsoft.public.windows.server.active_directory)
  • RE: 2000 to 2003 domain controller upgrade
    ... Hi Joe! ... I originally ran the tool from the domain controller to ... which I would like the schema master role transferred. ... >|attempting to connect to the server in question. ...
    (microsoft.public.windows.server.migration)
  • Re: Unix Bind and Windows DNS coexist problem with forwarder ON
    ... >> resolve to the IP address of the domain controller so client can ... If the record points to a web server your ... Create in Windows or UNIX Bind? ...
    (microsoft.public.windows.server.dns)
  • Re: Preparing Network Connections... forever
    ... Remeber both domains need to resolve each other, so make sure that both servers can reach eachother zone and that the new tree can resove the _msdcs domain. ... Active Directory was unable to establish a connection with the global catalog. ... Make sure a global catalog is available in the forest, and is reachable from this domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Windows Server 2003 and slow login
    ... >Yes, the Domain Controller should point to itself only, ... >forwarders to resolve externally. ... >connection in dns is checked in the TCP/IP advanced ... >net start netlogon ...
    (microsoft.public.windows.server.networking)