Getting CommitChanges General Access denied error in Active Directory

[Rajeev Masand]

Hello I trying to create intranet web application where user can change their profile information in AD but while doing this I am getting error message saying that:” System.UnauthorizedAccessException: General access denied error at System.DirectoryServices.Interop.IAds.SetInfo() at System.DirectoryServices.DirectoryEntry.CommitChanges()”. So can anyone suggest me how to solve this issue? Below my code:

Public sPath As String = "LDAP://domainname/OU=OITS,OU=ODI,DC=aa,DC=bb,DC=cc,DC=dd"

Dim dsUser As DirectoryEntry = New DirectoryEntry(sPath, "domain/AdminID", "AdminPassword", AuthenticationTypes.Secure)

dsUser = dsUser.Children.Find("CN=John")
With dsUser.Properties
.Item("displayname").Value = "John Doe"
End With
dsUser.CommitChanges()

I getting error message while calling CommitChanges, so can anyone suggest me what’s solution to this issue.

[Hiryuru]

By looking your code I think your credentials to the user DirectoryEntry not transferring and so therefore your getting the issue. in its place of reusing the DirectoryEntry 'dsUser' I would like to suggest you to try to create a new one, the credentials might transfer in this case: here is sample code for this:

Dim entry As DirectoryEntry = New DirectoryEntry(sPath, "domain/AdminID", "AdminPassword", AuthenticationTypes.Secure)

Dim dsUser as DirectoryEntry = entry.Children.Find("CN=John")
'Optionally Define username and password in case they are not xferring
'dsUser.Username = "domain\adminid"
'dsUser.Password = "AdminPassword"
With dsUser.Properties
.Item("displayname").Value = "John Doe"
End With
dsUser.CommitChanges()

[Lord]

By looking at your code I am not sure your code will because I think your administration you are binding as does not have proper permissions. I think your username that is “CN= John” is an admin account but he have lower permission and with this account your trying to update it. So I think you should check out your administration permission of the account which you’re using here.