<![CDATA[Dundas Support Zone - Active Directory Permissions Error]]>http://support.dundas.com/Dashboard5.ActiveDirectoryPermissionsError.ashxWed, 17 Jun 2020 20:06:02 GMTScrewTurn Wiki RSS Feed Generator<![CDATA[Active Directory Permissions Error]]>http://support.dundas.com/Dashboard5.ActiveDirectoryPermissionsError.ashx

Error Message

Failed to retrieve access rights.
Unable to perform an Active Directory query on domain ‘domainName’.

Symptoms

The above error may appear in any of these scenarios:

  • View the properties of a project item in the Design Explorer, then go to the Security tab.
  • Edit a user account or object security group from the Administration sidebar.

Cause

The reason may be related to using the ApplicationPoolIdentity account as the identity for the IIS application pool. In this case, the ApplicationPoolIdentity account does not have sufficient permissions for accessing Active Directory.

Resolution

To resolve this, do one of the following:

  • Grant permissions for accessing Active Directory to the ApplicationPoolIdentity account.
  • Use Network Service as the identity for the application pool.
  • Use a dedicated user account as the identity for the application pool.

Related topics

]]>
russellc@dundas.com (russellc@dundas.com)Tue, 08 Jan 2013 16:53:07 GMTE13D1D74EEE5AE901E0C7CA715AE6AB0