Results 1 to 4 of 4

Thread: -2147024891: General access denied error

  1. #1
    Join Date
    Aug 2006
    Posts
    115

    -2147024891: General access denied error

    I am using a webpage to allow users to update their details in our active directory. The webpage is userupdate.asp and when I login as admin, I am able to update all my details, but if I login as a standard domain user and try to update the details, then I am getting "-2147024891: General access denied error". I have followed the ms article page to sort this thing out, but it is not working for me. Any ideas?

  2. #2
    Join Date
    Sep 2005
    Posts
    1,370

    Re: -2147024891: General access denied error

    When you are doing a GetInfoEx on the allowedAttributesEffective attribute, then you will get an array containing the list of attributes that the current authenticated user has access to change on the current object. I think that you are trying to set an attribute value whose rights have not been delegated as you want it to be?

  3. #3
    Join Date
    Aug 2006
    Posts
    115

    Re: -2147024891: General access denied error

    For testing purpose, I have set the delegated rights just to use home phone number, and then got a user just to update the home phone field, and leave everything else blank but the error still happens. I will attempt the GetInfoEx that you have told and see what happens after that, i will keep you posted for same. Thanks

  4. #4
    Join Date
    Oct 2004
    Posts
    1,342
    I actually like the allowedAttributesEffective call since it tells you what you are allowed to edit instead of making you fuess. Soemtimes the bind doesnt work the way you think it did or your delegation of rights didnt. The other thing that might be going on could be a Kerberos delegation problem. To verify that you need to get the Kerberos authentication, so use IADsObjectOptions to check the mutual authentication flag, which is a very usesful diagnostic tool.

Similar Threads

  1. Replies: 2
    Last Post: 07-04-2012, 08:28 PM
  2. Replies: 6
    Last Post: 24-08-2011, 09:24 PM
  3. General access denied error
    By attitude.ashwin in forum Active Directory
    Replies: 1
    Last Post: 14-05-2011, 09:42 AM
  4. Replies: 2
    Last Post: 24-05-2007, 09:46 AM
  5. msconfig -- Access Denied error
    By Theodore Long in forum Windows Security
    Replies: 1
    Last Post: 18-07-2006, 07:48 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,642,798,180.23500 seconds with 17 queries