Error: 'Error creating computer: [C00442EE] You do not have the power to create the Computer cn=comp (NETIQKB26636)

fact
Directory and Resource Administrator 6.60

symptom
Error: 'Error creating computer: [C00442EE] You do not have the power to create the Computer cn=computer_name in the container ou_name.' When Creating a Computer Account in the Web Console

symptom

When attempting to create a computer account in the Directory and Resource Administrator Web Console, the following error may occur:

Error creating computer:
[C00442EE] You do not have the power to create the Computer cn=computer_name in the container ou_name

symptom

This issue does not occur when creating a computer account using the MMC interface.

cause

This issue occurs when the operation is permitted by an ActiveView rule with a scope including computers with name matching a naming convention.  An example of this rule is as follows:

• Include computers with name matching ABC* in domain Test

The problem is in the manner in which the Web Console passes the computer name to the server for validation.  The parameter passed by the Web Console is cn=computer_name while the MMC passes simply computer_name.  When the ActiveView rules are applied, CN=abc123 does not match the rule ABC*.

fix

Hotfix 26636 resolves this issue.  With it, DRA removes the cn= from the computer name before the ActiveView rule is applied.

To install this hotfix, run the DRA66000_Hotfix26636.exe file on all Administration servers and each computer where you installed the DRA Web Component.  To do so, please perform the following steps:

1. Stop the IIS Admin Service and World Wide Web Publishing services.
2. Run the hotfix installation.
3. Restart the stopped services.

This hotfix modifies the McsAdminAdsi.dll file on the Administration server computer.  By default, this file is located in the C:\Program Files\NetIQ\DRA folder.

Formerly known as NETIQKB26636