Error opening specified object –2147016646 assigning user rights

  • 7940335
  • 19-Aug-2009
  • 26-Apr-2012


SecureLogin SSO
Microsoft ADS environment


After running adschema.exe, the following message appears and rights aren’t assigned.

Error opening specified object –2147016646


This will occur if you are assigning rights to ADS containers other than the built in “Users” container and use CN when entering the path to the desired container. You don’t use CN=, you use OU=

  • Check the syntax is correct and the CN (or OU) and DC’s are correct
  • If assigning rights to OU’s that are not the built in ""Users"" container, use the following syntax (instead of CN=, use OU=)


  • If assigning rights to the built in Users container, user the following syntax (instead of OU=, use CN=)


  • Check the specified container exists
  • Check your spelling
  • Check your rights to modify the schema
  • Check the domain name (open Active Directory Users and Computers and check you have all instances of dc= in the path)

Additional Information

This error occurs if you enter: