Hi,

I'm trying to create a new user in windows 2000 server. It's a domain controller with ADSI.

My code looks like:

Set dso = GetObject("LDAP:")
Set obj1 = dso.OpenDSObject("LDAP://OU=Web,DC=xavigonzalvo,DC=ods,DC=org", _
"[email protected]", "pwd", ADS_SECURE_AUTHENTICATION)

Set usr = obj1.Create("user", "CN=newuser")
usr.Put "sAMAccountName", "newuser"
usr.SetInfo

usr.SetPassword "newuser_pwd"
usr.AccountDisabled = False
usr.SetInfo

And I get an error like:

Access denied

I can create the user but when I include the SetPassword instruction I get this error.

Any help? Thanks a lot

Hi xavigonzalvo,

I have included a possible solution below in C#, which does not use the SetPassword method but achieves the same result without the sleepless nights :). But in order for it to work you need to verify the following:
a) That SSL is enabled on the Active Directory Server and the ASP.NET Application server that you are using. You can check out the following link to enable SSL on your AD server: http://support.microsoft.com/default...-us;247078#kb2. If the app is on a different server than the AD server then you will have to export the root certificate (automatically installed on setting up) from Certificate Server on the AD and import it to the Trusted Root Certificates Store on your app server. You can do this via Tools - Internet Options - Content - Certificates.
b) To test that SSL is enabled, you can run the lpd.exe Windows 2000 Support Tools from the command prompt. Then connect to your DC via port 636. If you can bind using your admin or some other credentials, then SSL is enabled.

.................................................. ..................

DirectoryEntry usr = new DirectoryEntry(YOUR_LDAP_STRING); //your ldap string must connect to port 636 for SS

usr.AuthenticationType = AuthenticationTypes.SecureSocketsLayer;
string quotePwd;
byte[] pwdBin;

quotePwd = String.Format(@"""{0}""", password);

pwdBin = System.Text.Encoding.Unicode.GetBytes(quotePwd);

usr.Properties["unicodePwd"].Add(pwdBin);

usr.CommitChanges();

.................................................. ..................

Let me know if this was helpful to you.

John Mencias ([email protected])