Resolution
Symptom
Error: 'The AssistantAdmin does not have enough powers to run the 'UserSetInfo' operation' received when trying to enable an account via the Account and Resource Management console.
Symptom
The following Application log event is logged on the DRA server when trying to Enable and account via the Account and Resource Management Console:
Event Type: Failure Audit
Event Source: MCSAdminSvc
Event Category: UserSetInfo
Event ID: 16020
Date: 8/11/2004
Time: 9:34:21 AM
User: S-1-5-21-###
Computer: DRA_Server
Description:
ReturnCode: 0xc004427a:The AssistantAdmin does not have enough powers to run the 'UserSetInfo' operation.
Action: SetInfo
ObjectType: User
Target: Target_User
Operands: <none>
Policy: <none>
Trigger: <none>
Fact
Directory and Resource Administrator 7.0 SP1
Cause
This issue is due to the Account and Resource Management console not handling UPN suffixes that are in all capitals. This issue will typically appear on user objects that were migrated from Microsoft Windows NT 4.0 domain to a Microsoft Windows 2000 domain. Enabling users via the details pane will succeed, however trying to enable users while opening the properties of a user object will fail with the above error.
Fix
This issue is resolved in Hotfix 42853.
NetIQ Directory and Resource Administrator and Exchange Administrator version 7.0 SP1 Hotfix 42853
Hotfix 42853 corrects the following user interface issues:
- On the Reset Password window, the User must change password at next logon option is now checked by default.
- Corrects an issue when viewing the properties of a Microsoft Exchange 5.5mailbox. Previously, DRA would display the Container name property on the Advanced tab incorrectly if the mailbox was not in the default Recipients container. This hotfix corrects the issue and displays the complete LDAP path for mailboxes.
- Corrects an issue involving Microsoft Windows NTaccounts with UPN names utilizing all capital letters. You can now enable these user accounts using the Accounts and Resource Management console.
- Provides the ability to specify a custom email type when creating a new email address. Previously, this functionality was available through the Web console. This hotfix provides the same functionality to the Delegation and Configuration and Accounts and Resource Management consoles.
Note: This hotfix requires DRA 7.0 SP1.
To install this hotfix, run the DRA70001_Hotfix42853.msi file on each computer where you installed the DRA user interfaces.
This hotfix modifies the NetIQ.DRA.Console.Accounts.dll on console computers. By default, this file is located in the Program Files\NetIQ\DRA folder.
For more information, contact NetIQ Technical Support.