Assistant Administrators cannot enable or disable accounts from the account properties page. (NETIQKB50628)

fact
Directory and Resource Administrator 7.5

symptom
Assistant Administrators cannot enable or disable accounts from the account properties page.

symptom
Error: 'The assistant admin does not have enough powers to run this usersetinfo operation.'

cause
NetIQ Technical Support has identified this as a known issue caused by having a blank UPN field in the user properties. DRA automatically fills out the UPN field when you create a user account, but does not populate the field when accounts are migrated from NT4.0. Third-party tools also may not populate the field.

fix

To workaround this issue try one or more of the following:

• Populate the UPN field of the user accounts using a script or other supported method.
• Use the right-click menu for enabling and disabling user accounts when the UPN field is blank.
• Click Enable the account in the Details window.

Formerly known as NETIQKB50628