Error Message: 0x8000500D, E_ADS_PROPERTY_NOT

SYMPTOMS

When a user is a member of more than 201 groups and an attempt is made to access the user-password attribute in the directory, the following error message occurs:

0x8000500D, E_ADS_PROPERTY_NOT_FOUND

This error occurs when a Web page attempts to retrieve the user-password attribute in order to provide it to another user application, such as an e-mail program.

CAUSE

This problem occurs when there are more than 200 groups in the Personalization and Membership (P&M) directory that the Web site has been mapped to and a user is assigned to 202 groups.

An incorrect token length resource assignment is being performed. In the group expansion procedures, there is a built-in limit for the number of groups that a user can be a member of.

WORKAROUND

The ACEs in the Members container can be changed so that the Public group is denied Read/Write access to the user-password attribute. The user must still have FULL access. To do this, perform the following steps:

Remove the ACE deny on user-password on the Public group for the Members container.
Reduce the number of groups that the user is a member of to less than 202. This can be done by nesting groups so that the user is a member of a limited number of groups, which in turn are contained in other groups.

RESOLUTION

To resolve this problem, obtain the latest service pack for Site Server 3.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

219292 How to Obtain the Latest Site Server 3.0 Service Pack

MORE INFORMATION

This fix provides an increased limit of 500 groups for which the user can be a member of.