Error Message: Object Class Violation Adding User to Active Directory (273638)


The information in this article applies to:

  • Microsoft Metadirectory Services 2.2
This article was previously published under Q273638

SYMPTOMS

If you add a user to Active Directory with a value in $cd.location, the adding procedure does not work and Active Directory generates an object class violation. The following error messages are generated in the Adma.log file:
Starting MA in full mode...
DBG_01 0700 00/09/07 10:53:58.637 Discovering domains from Student05dom.
mmstest.com...
DBG_01 0700 00/09/07 10:53:59.121 1 naming contexts

DBG_01 0700 00/09/07 10:53:59.168 Processing entries from student05dom.
mmstest.com...
DBG_01 0700 00/09/07 10:54:56.436 697 entries inbound
ERR_00 0700 00/09/07 10:54:56.497 (AD-MA_dataFlowFromMdToAd) AD returned
65 = 'Object Class Violation' for operation on object CN=NCFour100,
OU=Exchange Contacts,DC=student05dom,DC=mmstest,DC=com
ERR_00 0700 00/09/07 10:55:04.732 (AD-MA_dataFlowFromMdToAd) AD returned
65 = 'Object Class Violation' for operation on object CN=NCFour12,
OU=Exchange Contacts,DC=student05dom,DC=mmstest,DC=com
ERR_00 0700 00/09/07 10:55:04.733 (AD-MA_dataFlowFromMdToAd) AD returned
65 = 'Object Class Violation' for operation on object CN=NCFour11,
OU=Exchange Contacts,DC=student05dom,DC=mmstest,DC=com
ERR_00 0700 00/09/07 10:55:04.747 (AD-MA_dataFlowFromMdToAd) AUTODIAGNOSE:
Modify of 2 values failed for object [CN=NCFour10,OU=Exchange Contacts,
DC=student05dom,DC=mmstest,DC=com]. Reissuing as single mods...
ERR_00 0700 00/09/07 10:55:04.778 (AD-MA_dataFlowFromMdToAd) AUTODIAGNOSE:
Mod of attribute streetAddress : Error 0 - Success
ERR_00 0700 00/09/07 10:55:04.779 (AD-MA_dataFlowFromMdToAd) AUTODIAGNOSE:
Mod of attribute location : Error 65 - Object Class Violation

CAUSE

In the Active Directory schema, the location attribute is not valid for user objects. This attribute is valid only for Computer, Print Queue, Site, and Subnet objects.

The following Active Directory Management Agent scripts are affected:
  • crt.st
  • secndflow.st

RESOLUTION

To work around this problem, follow these steps:
  1. Click the affected Active Directory management agent.
  2. On the Action panel, click the DesignMA button.
  3. On the Control Connected Directory tab, and then click CD accounts from connectors tab.
  4. Locate the following lines of code; there is a total of five similar lines that you have to comment out by using the number sign (#):
       #$cd.location = $mv.location
  5. On the Secondary Attribute Flow tab, locate the following lines of code; there is a total of similar lines that you need to comment out by using the number sign (#):
       #$cd.location = $mv.location

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
Modification Type:MinorLast Reviewed:1/25/2006
Keywords:kbbug kbenv kberrmsg KB273638
©2004 Microsoft Corporation. All rights reserved.