I get this error when I try to update the "groupType" using both VBS
as well as ADMOD. Why? The group I am working with has no users - it
was freshly created as a global group and I can't seem to change it to
a local (or universal) one.
Object name: testglobal (global group)
Domain: abc.domain.com
DC Name: DC1
DC IP (made up, of course): 4.4.4.4
-->First, here's proof the group exists in my AD!
IN:
dsquery group cn=testglobal,ou=groups,ou=it,dc=abc,dc=domain,dc=com
OUT:
"CN=testglobal,OU=Groups,OU=IT,dc=abc,dc=domain,DC=com"
-----------------------------------------------------------------------
-->Second, I tried changing the grouptype with ADMOD, to no avail:
IN:
C:>admod -h 4.4.4.4 -b
cn=testglobal,ou=groups,ou=IT,dc=abc,dc=domain,dc=com
grouptype::-2147483644 -exterr
OUT:
AdMod V01.10.00cpp Joe Richards (joe@[EMAIL PROTECTED]
) February 2007
DN Count: 1
Using server: DC1.abc.domain.com:389
Directory: Windows Server 2003
Modifying specified objects...
DN: cn=testglobal,ou=groups,ou=IT,dc=abc,dc=domain,dc=com...:
[DC1.abc.domain.com] Error 0x35 (53) - Unwilling To Perform
Extended Error: 00000032: SvcErr: DSID-031A0FC0, problem 5003
(WILL_NOT_PERFORM), data 0
ERROR: Too many errors encountered, terminating...
The command did not complete successfully
-----------------------------------------------------------------------
-->Third I tried VBS, but it returned the same "The Server is
Unwilling To Process The Request" which occurs on the SETINFO line:
set args = WScript.Arguments
num = args.Count
GroupName=args.Item(0)
msgbox "hi" & GroupName
Const ADS_GROUP_TYPE_UNIVERSAL_GROUP = -2147483640
Const ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP = -2147483644
Const ADS_GROUP_TYPE_SECURITY_ENABLED = &H80000000
Set objGroup = GetObject _
("LDAP://cn=" & GroupName &
",ou=Groups,ou=IT,dc=abc,dc=domain,dc=com")
objGroup.Put "groupType","-2147483644"
objGroup.SetInfo
----------------
Please Help!!!
Thanks
- JayDee
|
