The value of the nTSecurityDescriptor property may be null when you try to retrieve the nTSecurityDescriptor property from the DirectorySearcher class (327436)
The information in this article applies to:
- Microsoft Active Directory Service Interfaces 2.5
- Microsoft Visual C# .NET (2003)
- Microsoft Visual C# .NET (2002)
This article was previously published under Q327436 SYMPTOMSWhen you try to retrieve the nTSecurityDescriptor property from the DirectorySearcher class, you may find that the value of the nTSecurityDescriptor property is null.CAUSEThis behavior occurs if the account that is calling does not have sufficient user rights to access security information like the nTSecurityDescriptor property.RESOLUTIONTo retrieve the nTSecurityDescriptor property from the DirectorySearcher class, you must use an administrator account with Secure Authentication for Search Root Directory Entry user rights. For the case that is in the "Steps to reproduce the behavior" section, uncomment the following line of code: // #define ADMINISTRATOR_ACCOUNT Then, press F5 to build and then run the project. At the Microsoft Visual Studio .NET Command Prompt, you may receive the following message: nTSecurityDescriptor = System.Byte[]
----- Properties ----
prop. name = ntsecuritydescriptor
prop. name = adspath
STATUS This behavior is by design.
Modification Type: | Major | Last Reviewed: | 10/11/2004 |
---|
Keywords: | kbpermissions kbSecurity kbProgramming kbprb KB327436 kbAudDeveloper |
---|
|