Users Cannot Be Created in Active Directory When Commerce Server SP 2 SRP 1 (Q311401) Is Installed on the Domain Controller (319801)

The information in this article applies to:

Microsoft Commerce Server 2000 SP2

This article was previously published under Q319801

SYMPTOMS

When you use Commerce Server 2000 BizDesk to create a new user in Active Directory on a domain controller, the user is created, but the Must change password at next logon check box is selected. If you use Regtrace, you receive the following error message:

Error: Failed to create cn=user object. Error code: 80072035 ADsGetLastError returned: (8311) 00002077: SvcErr: DSID-031D0A84, problem 5003 (WILL_NOT_PERFORM)

CAUSE

The supportedCapabilities Lightweight Directory Access Protocol (LDAP) attribute is multi-valued. Before you install Microsoft Windows 2000 Security Rollup Package (SRP) 1, the data is requested from Active Directory as a single-valued property. After you install Windows 2000 SRP 1, the data is returned as a multi-valued property.

WORKAROUND

To work around this problem, remove Windows 2000 SRP 1 from the domain controller.

RESOLUTION

To resolve this problem, obtain the latest service pack for Commerce Server 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

297216 INFO: How to Obtain the Latest Commerce Server 2000 Service Pack

The English version of this fix should have the following file attributes or later:

   Date         Time   Version    Size    File name   Platform
   -------------------------------------------------------------
   14-Mar-2002  18:06  4.00.3037  74,000  Mscsdp.dll  i386

STATUS

Microsoft has confirmed that this is a problem in Commerce Server 2000. This problem was first corrected in Commerce Server 2000 Service Pack 3 (SP3).

Modification Type:	Minor	Last Reviewed:	9/27/2005
Keywords:	kbHotfixServer kbQFE kbbug kbCommServ2000preSP3fix kbCommServ2000sp3fix kbfix KB319801