0xc004392b:Error performing task: Unable to set the nt security descriptor

  • 7013375
  • 26-Sep-2013
  • 03-Oct-2013

Environment

NetIQ Directory & Resource Administrator 8.x

Situation

When setting permission on a users mailbox you receive an error: 0xc004392b: Error performing task: Unable to set the nt security descriptor.

Cause

DRA throws the error "The parameter is incorrect"  when the limit size of "nTsecurityDescriptor" property was exceed.
This Microsoft article explains more about exceeding the size of an ACL. The maximum size of an ACL is 64 kilobytes (KB), or approximately 1,820 ACEs.  http://support.microsoft.com/kb/166348. The ACEs count will vary according to the type of permissions that are selected.