PRB: Retrieving Attributes of mGroup Object Throws Error 0x8000500D

• Microsoft Site Server version 3.0
• Microsoft Active Directory Service Interfaces, version 2.5

SYMPTOMS

When you try to retrieve the attributes of an mGroup object that is a child of the ou=NTGroups container using VBScript, the call to Get() throws the error 0x8000500D.

CAUSE

The object in the Membership Directory is being bound to anonymously (for example, using GetObject() ). By default, access to objects created under the ou=NTGroups container are limited to members of the cn=Administrators and cn=SiteServer Administrators groups. If an anonymous bind to the object occurs, the bind succeeds, however, subsequent calls to Get() fail with 0x8000500D (E_ADS_PROPERTY_NOT_FOUND). This error occurs because the user does not have access to the attributes. Therefore, the attributes are not loaded into the ADSI property cache.

RESOLUTION

Do one of the following to resolve this problem:

• Bind to the object using OpenDSObject(), which allows you to pass authentication information (username and password) when binding to the object. For example:
  

  
  Dim adsGroup
  Dim strLdapPath
  Dim strAdmin
  Dim strAdminPwd
  
  strLdapPath =
  "LDAP://[server]:[port]/o=[realm]/ou=Groups/ou=NTGroups/cn=[groupname]"
  strAdmin = "cn=administrator,ou=Members,o=[realm]"
  strAdminPwd = "password"
  
  'Bind to the LDAP NS Provider.
  Set adsGroup = GetObject("LDAP:")
  
  'Now bind to the group.
  Set adsGroup = adsGroup.OpenDSObject(strLdapPath, strAdmin, strAdminPwd, 0)
  
  'Continue to read or modify attributes. 

• Grant the cn=Public group access to the object through the Site Server Membership Directory Manager.

STATUS

This behavior is by design.

Additional query words: 8000500D

Keywords : kberrmsg kbADSI kbScript kbVBScript prodsitesrv3
Version : winnt:2.5,3.0
Platform : winnt
Issue type : kbprb