Error: 'The AssistantAdmin does not have enough powers to run the 'UserSetInfo' operation' (NETIQKB42157)

  • 7742157
  • 17-Apr-2007
  • 14-May-2007



Error: 'The AssistantAdmin does not have enough powers to run the 'UserSetInfo' operation' received when trying to enable an account via the Account and Resource Management console.


The following Application log event is logged on the DRA server when trying to Enable and account via the Account and Resource Management Console:

Event Type: Failure Audit
Event Source: MCSAdminSvc
Event Category: UserSetInfo
Event ID: 16020
Date:  8/11/2004
Time:  9:34:21 AM
User:  S-1-5-21-###
Computer: DRA_Server
ReturnCode: 0xc004427a:The AssistantAdmin does not have enough powers to run the 'UserSetInfo' operation.
Action:  SetInfo
ObjectType: User
Target:  Target_User
Operands: <none>
Policy:  <none>
Trigger:  <none>


Directory and Resource Administrator 7.0 SP1


This issue is due to the Account and Resource Management console not handling UPN suffixes that are in all capitals.  This issue will typically appear on user objects that were migrated from Microsoft Windows NT 4.0 domain to a Microsoft Windows 2000 domain.   Enabling users via the details pane will succeed, however trying to enable users while opening the properties of a user object will fail with the above error. 


This issue is resolved in Hotfix 42853.

NetIQ Directory and Resource Administrator and Exchange Administrator version 7.0 SP1 Hotfix 42853

Hotfix 42853 corrects the following user interface issues:

  • On the Reset Password window, the  User must change password at next logon option is  now checked by default. 
  • Corrects an issue when viewing the properties of a Microsoft Exchange 5.5mailbox. Previously, DRA would display the Container name property on the Advanced tab incorrectly if the mailbox was not in the default Recipients container. This hotfix corrects the issue and displays the complete  LDAP path for mailboxes.  
  • Corrects an issue involving Microsoft Windows NTaccounts with UPN names utilizing all capital letters.  You can now enable these user accounts using  the Accounts and Resource Management console. 
  • Provides the ability to specify a custom email type when creating a new email address. Previously, this functionality was available through the Web console. This hotfix provides the same functionality to the Delegation and Configuration and Accounts and Resource Management consoles.

Note: This hotfix requires DRA 7.0 SP1.

To install this hotfix, run the DRA70001_Hotfix42853.msi file on each computer where you installed the DRA user interfaces.

This hotfix modifies the NetIQ.DRA.Console.Accounts.dll on console computers. By default, this file is located in the Program Files\NetIQ\DRA folder.

For more information, contact NetIQ Technical Support.

Additional Information

Formerly known as NETIQKB42157