ADClean - Unwilling to perform

G

Guest

All

I have an error generated by the AD cleanup wizard (used to merge accounts in AD). The error message from the program iincludes the following:

The reason for the failure is (Unwilling To Perform)

I understand this error may be related to an inability to populate attributes owned by the system such as:

badPasswordTime
badPwdCount
lastLogoff
lastLogon
logonCount
objectGUID
objectSid
primaryGroupID
pwdLastSet
sAMAccountType

as indicated by articles like
http://support.microsoft.com/default.aspx?scid=kb;en-us;276382

Unfortunately I can't see any way around this. As we are part way through a long term migration to Exchange 2003 a number of ADC generated accounts are present in AD and need to be linked to "real" accounts. The ADC generated disabled accounts have some of the above attributes populated. I would think that ADClean could get around this by ignoring these attributes ... ??

How do I get around the "Unwilling to perform" error and get ADClean to actually work as described?

Is there another program to merge these accounts, or is there a script doing the basics of the program?

Hope to hear back from you … or anyone else with an answer.

Thanks
Smith
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top