Error: The operation failed. Unable to perform this operation because of company policy. This scrip (NETIQKB54758)

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fact
Directory and Resource Administrator 8.0

symptom
UserCreate or UserCopy pre-task  triggers are running when creating an Exchange mailbox.

symptom
Error creating a mailbox with DRA.

symptom
Unable to create a mailbox with Directory and Resource Administrator.

symptom
Error: "The operation failed. Unable to perform this operation because of company policy. This script should be used only for the following operations: UserCopy, UserCreate.. "

symptom
Logged event 1074020106(AuditFailure) args = "ReturnCode: 0xc0044647: This script should be used only for the following operations: UserCopy,UserCreate...

symptom
IQ Extend triggers are firing when you try to create a mailbox manually.

cause
The problem is that triggers and policy get launched based on the power (which we can think of as the intent of the user) being exercised, not the operation being performed.  Since CreateMailbox is mapped to the UserCreate power, you have to have the UserCreate Power (with a certain bit turned on) to create a mailbox.

fix

The workaround for this is to add the following lines of code to each of your trigger scripts that should NOT be associated with MailboxCreate operations:

If sOperationName = "MailboxCreate" then

Main = True

Exit Function

End If

This will keep the triggers from firing when you create a mailbox. 

Formerly known as NETIQKB54758