Built-In Admins receive an error stating that they are unable to create a computer account due to a (NETIQKB19303)

  • 7719303
  • 02-Feb-2007
  • 04-Dec-2012

Environment

NetIQ Directory and Resource Administrator 8.x

Situation

Built-In Admins receive an error stating that they are unable to create a computer account due to a company policy.
 
Error: 'An error occured creating the Computer_name computer. Error Occured: Unable to perform this operation because of company policy. Name specified does not meet convention policy. Names must match ABC*.'

Resolution

When defining a naming convention policy, and a scope of "Apply to actions on objecteds included in" is set with an ActiveView specification, this does not mean that the policy applies to actions performed by Assistant Admins defined in the particular ActiveView. It means that actions are performed on objects that the ActiveView defines.

If you define the scope to be "Apply to actions on objects included in", define a particular ActiveView, and also define "Apply to actions performed by" with a defined particular Assistant Admin group, then both criteria must be true for the naming policy to apply.

For example:

  1. Define an ActiveView called, "Sales Computer", with the rule "Include computers in OU called Sales".
  2. Define the naming convention policy for the computer to be "abc*", setting the scope to be "Apply to actions on objects included in a particular ActiveView", with the ActiveView being called "Sales Computers".
  3. When a Built-in Admin tries to create a computer account in the Sales OU that does not match the naming convention, the Built-in Admin will receive the error above.
note

If you define the scope to be  Apply to actions on objects included in , define a particular ActiveView, and also define  Apply to actions performed by  with a defined particular Assistant Admin group, then both criteria must be true for the naming policy to apply.

Cause

This is by design.

Additional Information

Formerly known as NETIQKB19303