Error: "Not set or no read permission" using bv-Control for Active Directory

Article:TECH113514  |  Created: 2007-01-18  |  Updated: 2007-01-20  |  Article URL http://www.symantec.com/docs/TECH113514
Article Type
Technical Solution


Issue



Not able to report on certain fields for "Users" data source using bv-control for Active Directory

Symptoms
Error message: not set or no read permission



Cause



The credentials used for the query are incorrect or does not have privilege to read the information from the Domain Controller

Solution



Check for credentials in the credential database, if unable to modify the existing credentials, create another credential database and make sure that correct credentials for all snap-ins are entered.

To check whether the service account or credential account has the privilege to read the information from the domain controller please perform below steps:
  1. Try to logon remotely to the Domain Controller box with the credentials used in credential database or service account.
  2. Use "ADSI Edit" and check if you can read the user information under | | CN=Users.
Note: "ADSI Edit" is located under "windows 2000 support tools" | "tools". To use this utility you need to have "windows 2000 support tools" installed.


References
To know about how to install "windows 2000 support tools" please refer this link: http://support.microsoft.com/kb/301423/





Legacy ID



2007101813154653


Article URL http://www.symantec.com/docs/TECH113514


Terms of use for this information are found in Legal Notices