Privacy Policy
Error: “Access Denied” or "Insufficient permissions"
Symptoms | When a user tries to reset a password via Self-Service portal he recieves “Access Denied” error or "Insufficient permissions" |
Cause | The error occurs when the Password Manager service account does not have enough permissions to perform the requested action. |
Resolution | To resolve the issue: AdminSDHolder is a container inside Active Directory that maintains a master list of permissions for objects that are members of privileged groups in Active Directory. Access control prevents access of non-privileged accounts to this container.
Below are some of the protected groups that cannot be handled without domain admin rights:
More information about it here:
http://blogs.technet.com/b/askds/archive/2009/05/07/five-common-questions-about-adminsdholder-and-sdprop.aspx
|