PRB: Retrieving Attributes of mGroup Object Throws Error 0x8000500D (220856)
The information in this article applies to:
- Microsoft Site Server 3.0
- Microsoft Active Directory Service Interfaces 2.5
This article was previously published under Q220856 SYMPTOMS
When you try to retrieve the attributes of an mGroup object that is a child of the ou=NTGroups container using VBScript, the call to Get() throws the error 0x8000500D.
CAUSE
The object in the Membership Directory is being bound to anonymously (for example, using GetObject() ). By default, access to objects created under the ou=NTGroups container are limited to members of the cn=Administrators and cn=SiteServer Administrators groups. If an anonymous bind to the object occurs, the bind succeeds, however, subsequent calls to Get() fail with 0x8000500D (E_ADS_PROPERTY_NOT_FOUND). This error occurs because the user does not have access to the attributes. Therefore, the attributes are not loaded into the ADSI property cache.
RESOLUTION
Do one of the following to resolve this problem:
- Bind to the object using OpenDSObject(), which allows you to pass authentication information (username and password) when binding to the object. For example:
Dim adsGroup
Dim strLdapPath
Dim strAdmin
Dim strAdminPwd
strLdapPath =
"LDAP://[server]:[port]/o=[realm]/ou=Groups/ou=NTGroups/cn=[groupname]"
strAdmin = "cn=administrator,ou=Members,o=[realm]"
strAdminPwd = "password"
'Bind to the LDAP NS Provider.
Set adsGroup = GetObject("LDAP:")
'Now bind to the group.
Set adsGroup = adsGroup.OpenDSObject(strLdapPath, strAdmin, strAdminPwd, 0)
'Continue to read or modify attributes.
- Grant the cn=Public group access to the object through the Site Server Membership Directory Manager.
STATUS
This behavior is by design.
| Modification Type: | Major | Last Reviewed: | 6/11/2002 |
|---|
| Keywords: | kberrmsg kbprb kbScript KB220856 |
|---|
|