WinBatch Tech Support Home

Database Search

If you can't find the information using the categories below, post a question over in our WinBatch Tech Support Forum.

TechHome

ADSI
plus

Can't find the information you are looking for here? Then leave a message over on our WinBatch Tech Support Forum.

dsAddtoGroup 1063 Object Does Not Exist

 Keywords: dsAddtoGroup 1063 Object Does Not Exist Trusted Domain Users 

Question:

I have the following case:
  • I have 2 trusted domains: dom01 and dom02
  • As administrator of dom01 I can create and modify users in dom02
  • I have a global group in dom01.
  • I want to add a user in dom02 to a group in dom01.
grpath = 'LDAP://CN=lmdoornbos,CN=users,DC=dom02,DC=pv'
usrpath = 'LDAP://CN=IV-Group,CN=users,DC=dom01,DC=pv'
dsAddToGroup(grpath,usrpath)
Now I get the error 1063 object does not exist. I checked the both path by asking and modifying a property
WWWBATCH.INI:
[ADSI Extender]
ErrorCode=1317
ErrorText=00000525: NameErr: DSID-031A11CC, problem 2001 (NO_OBJECT), data 0, best match of:''
Provider=LDAP Provider
Any ideas ?

Answer:

There are many factors that come into play when doing cross domain tasks - including the group type and the relationship of the domains. Keeping it all straight can be a bit of a challenge. In your case, I think the problem is that you are attempting to add a user from another domain to a global group. IIRC, global groups do not accept members from other domains.

From MSFT:

"A global group is a group that can be used in its own domain, in member servers and in workstations of the domain, 
and in trusting domains. In all those locations, you can give a global group rights and permissions and the global 
group can become a member of local groups. However, a global group can contain user accounts that are only from 
its own domain."
So, you can add users from one domain to groups in another domain but you can't add a user from another domain to a Global Group.

Try working with the LDAP path by specifying the domain that each object belongs to in the 'HostName' part of the LDAP path string.


Article ID:   W17523
Filename:   dsAddtoGrp 1063 Object Does Not Exist.txt
File Created: 2010:04:15:09:45:36
Last Updated: 2010:04:15:09:45:36