Having problems with using the GroupAdd UDF
On trying to add a user to to domain group the function fails at:
$group = GetObject("WinNT://$target/$group")

I have even tried to hard code but i keep getting the error -2147024843.

Platform
NT Server 4.0, SP6a
KiXtart 2001, RC3, Build 50
ADSI 2.5

I look forward to your responses

GetObject("WinNT://[domain name]") returns error code 0. It seems to complain when I extend it to GetObject("WinNT://[domain name]/[group name]")

The user that the script runs under has full domain access rights as far as I am aware

It is a NT domain?

Bryce

The group name is PS_Developers and the domain is an NT domain. Would you prefer to continue this via email ?

You going to be around for a while? I know it has to be getting towards evening where you are.

Bryce

You are correct. In fact it's about half past twelve at night. I have had a backup tape device failure and am in the process of implmenting a workaround. It's going well so I suspect that I will be gone in about 45 minutes. Is there any further info that I can supply ?

You do have ADSI installed on all Domain controllers?

what does the @serror macro say?

Bryce

The group is global ( i also tried with "Domain Admins") however ADSI is NOT installed on all domain controllers. I'm sure that it is not included as part of our standard NT server setup.

What is the requirement for the installation of ADSI for GetObject("WinNT:// etc) to work ?

Is it possible to test scripts without all controllers having ADSI installed ?

@SERROR returns

Error (317 / 13D) while retrieving error information for 8007203A

I don't think the PDC/BDC require ADSI (I could be wrong) I have tried your previous group add code on a Windows 2000 workstation and I dd not have any problem with it. I think only the calling system needs the ADSI?

Mark,
Can you please post your code. Maybe I was using a different piece of code from Bryce.

ALL NT4.0 computers involved in a ADSI connection will need ADSI installed

Unfortunately we are still on a NT Server/Win9x client infrastructure although we are looking to move to Win2K.

Another tricky one is that the provider is case sensitive ie WINNT is not the same as WinNT.

Q. If ALL NT machines involved in the ADSI exchange require ADSI to be installed what machines are being used when you call WinNT://Domain/Group

I don't suppose that Win9x handles ADSI better than NT

Erik

My calling machine does have ADSI installed

The code is quiet straight forward

$dom = GetObject("WinNT://ADECCO")
returns no error

$dom = GetObject("WinNT://ADECCO/Domain Users")
returns the error as mentioned

every time i have tried to do an ADSI task on a remote NT4 computer it would fail if ADSI was not installed... weird.

What exactly do you mean when you say

"do an ADSI task on a remote NT4 computer"

you mean, for example, if you were to run a script on your w2k wks that enumerated all services on an NT4 domain controller, it would fail. And installing ADSI on your DC fixed the problem ? Like Erik, said (and I know you know this) ... the whole purpose of the WinNT service provider is to provide backward-compatible support for NT ... no ADSI need be installed (on the "target" machine) ... this is very perplexing ?

Same with Mark's problem .. very weird ... so Mark - in your example, ADECCO is your domain name ?

-Shawn

code:

---

seterror("-2147024843")
? @error
? @serror
function seterror($a)
	exit($a)
endfunction

---

and i get the following.

-2147024843
The network path was not found.

As for needing ADSI in the remote computer....Looks like i may be wrong!

ADECCO is the domain name. Interesting that @serror returned by me

"Error (317 / 13D) while retrieving error information for 8007203A"

is different to the one returned by Bryce
"The network path was not found."

Certainly $dom = GetObject("WinNT://ADECCO")
works and if I loop through the objects returned I get lots of stuff back.

I'm very perplexed. Is the solution to install ADSI on all computers or all network servers or just DCs and BDCs ?

$dom = GetObject("WinNT://ADECCO/Domain Users,group")

add the GROUP qualifier to the end of the string ...

-Shawn

[ 14 November 2001: Message edited by: Shawn ]