Not able to disable the user useraccountcontrol 546

hello all,

we using sap based identity tool creation , deletion of active directory users. in active directory have promoted 2012 domain controllers. have provided necessary rights tool creating , deleting users.

for last 4 years tool uses 544 upon creation of id, 2008 r2 sp1 domain controllers. last few days ad ids not able disable via 546. attached error seen in identity tool.

apart domain controller change 2008 r2 2012 r2, there not single change in ad? there difference in user account control in 2008 r2 to 2012 r2?

---

thanks ha

the value 544 useraccountcontrol means: normal user + password not required. value 546 means same, plus account disabled. there no change in useraccountcontrol introduction of windows server 2012.

the error indicates lack of permissions. doing when got error? saying able create user, not able disable account? also, rights need granted user creating or modifying user accounts, not tool being used.

edit: should note not recommended use "password not required". security issue. got error either because attempted enable account setting, or account does not have password. have changed windows server 2012.

---

richard mueller - mvp directory services

Windows Server  >  Directory Services