Platform SDK: Active Directory, ADSI, and Directory Services

Effects of Security on Queries

Security is an implicit filter when performing searches, enumerating containers, or reading properties.

ADSI can return NO_SUCH_PROPERTY or NO_SUCH_OBJECT errors even when the object exists if you do not have access to read attributes on the object.

For example, a caller may be able to enumerate the child objects in a container because the caller has LIST_CONTENTS rights on the container. But the same caller may not be able to access the enumerated objects if the caller does not have read access to the child objects. In this case, a query for a child object may return NO_SUCH_OBJECT even though the caller successfully enumerated the object.

If the caller does not have sufficient rights, the following return codes may be returned:

E_ADS_INVALID_DOMAIN_OBJECT

E_ADS_PROPERTY_NOT_SUPPORTED

E_ADS_PROPERTY_NOT_FOUND