Active Directory UDF - Help & Support (II)

[water]

AutoIt can just display the line number of the statement that fails, not the line where the failing function was called.

Sorry, but a default error handler can not provide more information.

[kor]

 

Also getting lots of these errors in a script that adds/deletes/moves users.

COM Error Encountered in ASABv3.au3

AD UDF version = 1.3.0

@AutoItVersion = 3.3.8.1

@AutoItX64 = 0

@Compiled = 0

@OSArch = X86

@OSVersion = WIN_7

Scriptline = 914

NumberHex = 80020009

Number = -2147352567

WinDescription = 

Description = The directory property cannot be found in the cache.

Source = Active Directory

HelpFile = 

HelpContext = 0

LastDllError = 0

========================================================

 

I wish it would be more specific which directory property.

 

I've identified the function causing this problem is

_AD_GetUserGroups

The above error seems to be generated when a user is not in any groups within AD (other than the default built in "domain users" group)

@error reports 0

@extended reports 0

Edited September 28, 2013 by kor

[water]

The "The directory property cannot be found in the cache" messages can - most of the time - be ignored. A function tries to access a property that is not available for the specified object.

[water]

The function _AD_GetUserGroups returns 0 for @error and @extended because no error occurred. There was just no data to return.

The COM error handler can't be more specific because there is no easy way to analyze and report the executed statement and (if called from a function) the function name.

I wished AutoIt had a macro to report the name of the currently executed function.

Edited September 28, 2013 by water

[kor]

The "The directory property cannot be found in the cache" messages can - most of the time - be ignored. A function tries to access a property that is not available for the specified object.

I'd like to ignore it, but it writes to the console and thus screws up a lot of my other debugging and status messages when my scripts are running. Is there any way to get this not to write to the console? Seems like a silly error to report if a user is not part of any groups. It should handle that scenario a little more gracefully.

[water]

It's a COM error. And the COM error handler reports all COM errors.

Only possible solution: Deactivate the COM error handler before calling this function and re-enable it afterwards.

[kor]

It's a COM error. And the COM error handler reports all COM errors.

Only possible solution: Deactivate the COM error handler before calling this function and re-enable it afterwards.

how?

*Also, why is a COM error being generated if your function queries a user for groups that isn't in any groups. You have an amazing AD.au3 however it seems kinda strange that a COM error is generated for a VERY common scenario.

Edited September 29, 2013 by kor

[water]

Use

_AD_ErrorNotify(0)

to disable and

_AD_ErrorNotify(1)

to enable writing to the console again.

[water]

*Also, why is a COM error being generated if your function queries a user for groups that isn't in any groups. You have an amazing AD.au3 however it seems kinda strange that a COM error is generated for a VERY common scenario.

The COM error is generated by AutoIt, not the UDF.

The AD UDF activates a COM error handler (if the user didn't do it himself before calling _AD_Open) to prevent AutoIt from crashing when a COM error occurres.

[badapple89]

I've made a script for creating new users in AD and then modifying the new users basic attributes like there phone number and other simple details.

But when I compare a user created via this and via just making normally I noticed that:

 

When making normally.

userAccountControl

512 = NORMAL_ACCOUNT

 

and via script

userAccountControl

544 = PASSWD_NOTREQD - NORMAL_ACCOUNT

 

I cant seem to change it via AD directly I assume because of our password policy.

 

 

I have tried the below code but obviously dosn't work for a newly created user either (does for existing)

;Values are actually stored in an array UAC has quotes but 512 does not, didn't appear to work with quotes.
_AD_ModifyAttribute($sAD_User, "userAccountControl", 512)

 

 

Sooooo I believe I need to set this attribute WHEN creating rather than modifying AFTER creating.

 

Could you please help?

[water]

What is the value of @error after unsuccessfully running

_AD_ModifyAttribute($sAD_User, "userAccountControl", 512)

[water]

Details about the UAC settings can be found here.

A better description of the flag can be found here.

Edited October 2, 2013 by water

[badapple89]

@Error = -2147352567
WinDescription = The server is unwilling to process the request.

The script is generating error as I cant change this property in AD for a user < 1day old.

I guess the question is can I set the property as 512 as part of _AD_CreateUser?

I gather I would modify the UDF to do this? However not sure how or what to change.

[water]

IIRC this message pops up when you "violate" a group policy when setting a property.

I checked here and all users have UAC 544. So doesn't look like a problem.

[Iceman682]

Hi Water,

Quick question hopefully.

Is it possible to list all the disabled computer object in AD that isn't in the Disabled Computer Container?

Many thanks

[water]

Depending on the structure of your AD you could set parameter $sRoot of _AD_GetObjectsDisabled to define the OU where to start searching.

Our you search the whole AD and drop those computers in the Disabled Computer Container from the array.

[Iceman682]

Thanks I'll give it a try.

[hartmch]

Is there an easy way to modify the treeview example to include the computers on the domain.  I've been searching for a few days now and haven't figured anything out.  Would I need to combine _AD_GetAllOUs with _AD_GetObjectsInOU?  Thanks for any help

[water]

That's easy

Set parameter $sCategory of _AD_GetOUTreeView to "computer".

[hartmch]

I'm still not getting any branches in my treeview.  Just 1 long list.  I think it might be related to spaces in the OU name.  Ill look into and see what I can figure out.  Thanks for your help