Group Admin can add user to group but can't update user account in SAM SDK

Hi
I have created a user X and Group Y, and I have assigned the created Group Y Admin Role to user X and made user X a member of Group Y.
Now User X can create users but can't see them when doing a search.
Also if using the SDK this user attempt to add a user he created as a member of Group Y the LDAP return an error that user X dosen't have enough permissions to update the membership attribute of the new user account that he created.
Funny enough looking in the LDAP, the user is actually added as a member of the Group.
So the Group was updated correctly but the suer account is not.
Does anybody now a fix for this issue or is it fixed in any patches to SAM 7.1

Hi,
Did the issue happen only for you or for multiple users?
Please login on other well worked Lync client from other computer with your Lync account to test the issue.
Please also use another well worked Lync account login your Lync client and test the issue.
You can disable your Lync account from Lync Server Control Panel and clear all SIP related information from AD, then re-enable your Lync account from Lync Server Control Panel to have a try.
Here is a similar case may help you:
http://social.technet.microsoft.com/Forums/lync/en-US/09032674-3927-4898-8f93-f3e6f3eab540/lync-2013-cannot-add-remove-or-move-contacts-or-groups-at-this-time?forum=lyncprofile
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Similar Messages

  • HT204053 Dear Support Team, every time i tried to logon Icloud its gives me wrong user name or password and at the end it show me error " This Apple ID is valid but is not an ICloud Account" then how can i use one account for same Apple ID and ICloud???

    Dear Support Team,
    Every time i tried to logon Icloud its gives me wrong user name or password and at the end it show me error " This Apple ID is valid but is not an ICloud Account" then how can i use one account for same Apple ID and ICloud?
    Thanks

    It is not possible to create a new iCloud account using a Windows machine. You must create the account using a Mac (10.7.5 or more) or an IOS device (iPhone etc). Once that is done you can sign into and use the account on your Windows machine.

  • System Image Utility / Automator Add User Account no default shell

    I've noticed when creating a customized netrestore flow in System Image Utility for Yosemite, the result of the "Add User Account" action is a user missing a default shell. Noticed this when terminal kept closing as soon as it was opened. dscl -create localhost /Local/Default/Users/USERNAME UserShell /bin/bash fixed the issue but is obviously undesired for provisioning new computers. Any ideas how to configure a default shell for new users created in this way?

    Solved by ensuring the add user account action immediately follows the define image source action.

  • HT204053 I have downloaded icloud to my pc, however when i go to sign in to Apple through icloud, i get an error message saying my apple ID is valid but is not an icloud account. What does this mean and how can i update my account so i can access icloud?!

    I have downloaded icloud to my pc, however when i go to sign in to Apple through icloud, i get an error message saying my apple ID is valid but is not an icloud account. What does this mean and how can i update my account so i can access icloud?!

    To use iCloud, you must first set it up with your Apple ID on a device with iOS 5 or a Mac with OS X Lion.

  • Photoshop Elements 11 installed on Mac Mini OS X 10.9.5. Application running successfully on bot main user and administrative accounts for considerable time with no warning messages. When established a new user account on same computer and try to call up

    Photoshop Elements 11 installed on Mac Mini OS X 10.9.5. Application running successfully on bot main user and administrative accounts for considerable time with no warning messages. When established a new user account on same computer and try to call up elements receive message “Some ot the application components are missing from the Application directory. Please reinstall the application.” How do I correct this problem without disturbing application in main user account?

    Brooks lansing if you create a new Administrator account does the same issue occur?  If so then it is likely that there is a file permission failure and file permissions have been set for the existing Users instead of the groups they belong to.
    Have you removed and reinstalled Photoshop Elements 11?  This may reset the file permissions to the correct state to allow it to work under new accounts.

  • HT1918 my account in app store has expired how can i update my account ??

    my account in app store has expired how can i update my account ??

    Changing Account Information
    http://support.apple.com/kb/HT1918

  • HT3702 Trying to purchase on itunes, my card was declined.  Called bank, they said it is fixed now.  Card is still declined and I can't update my account.  what shall I do?

    Trying to purchase on itunes, my card was declined.  Called bank, they said it is fixed now.  Card is still declined and I can't update my account.  what shall I do? iTunes says contact customer support.  is this it?

    I also have this problem. I have a debit card & I even verified every single piece of info with my bank on the phone, online, AND in writing...it's clearly an issue with itunes and I can't get anyone on the phone without a hefty charge to my account.

  • I am attempting to burn a disk and get the message to authorize my laptop. I have done this. Can I update my account name on purchased media?

    I am attempting to burn a disk and get the message to authorize my laptop. I have done this. Can I update my account name on purchased media?

    You might be using an invalid email address that you are sending to or your mail settings for the account are wrong.  Check the address and I would delete the email account and reenter it

  • SharePoint 2010 Central Admin to add users from AD from specific Department

    Dear All,
    I am working on SharePoint Foundation 2010. I have to add users from specific department to a particular site collection.
    Please let me know if there is a way to import users from Active Directory based on the 'Department' filed in
    SPCA.
    Thanks.

    Is that okay if I share the PowerShell code? Do you have access to Active Directory and can you query information?
    Refer this Link
    Code
    # set site collection owner for all sites...
    # 1-2012
    Add-PSSnapin Microsoft.SharePoint.PowerShell
    # $AccountList is an array of Windows Identities in the format of $AccountList = @("DOMAIN\USERID" , "DOMAIN\USERID2")
    $accountList = @(Get-ADUser -Filter {(Department -like '*Ur Needs*')})
    #$AccountList = @("LAB\Jack", "Lab\tom", "Lab\dick", "lab\harry")
    #this gets an array of objects representing the sites at the IIS level:
    $IISSites = Get-SPWebApplication
    Foreach($oneIISSite in $IISSites)
    #using .Sites, we can get a list of the site collections
    foreach ($SharepointSiteCollection in $oneIISSite.Sites)
    write-host $SharepointSiteCollection.url -ForegroundColor Cyan
    $spweb = Get-SPWeb $SharepointSiteCollection.url
    #now we have the website, so lets look at each account in our array
    foreach ($Account in $AccountList.samaccountname)
    #lets see if the user already exists
    Write-host "Looking to see if User " $account " is a member on " $SharepointSiteCollection.url -foregroundcolor Blue
    $user = Get-SPUSER -identity $Account -web $SharepointSiteCollection.url -ErrorAction SilentlyContinue #This will throw an error if the user does not exist
    if ($user -eq $null)
    #if the user did NOT exist, then we will add them here.
    $SPWeb.ALLUsers.ADD($Account, "", "", "Added by AdminScript")
    $user = Get-SPUSER -identity $Account -web $SharepointSiteCollection.url
    Write-host "Added user $Account to URL $SPWeb.URL" -Foregroundcolor Magenta
    else
    Write-host "user $Account was already in URL " $SPWeb.URL -Foregroundcolor DarkGreen
    if ($user.IsSiteAdmin -ne $true)
    $user.IsSiteAdmin = $true
    $user.Update()
    Write-host "$account has been made an admin on $SPWeb.URL" -Foregroundcolor Magenta
    else
    Write-host "$account was already an admin on $SPWeb.URL" -Foregroundcolor DarkGreen
    $SharePointSiteCollection.Dispose()
    Note:
    First uncomment the second $accountlist add the user manually to test
    If you have AD module installed in your SP server you can use
    $accountList = @(Get-ADUser -Filter {(Department -like '*Ur Needs*')})
    Regards Chen V [MCTS SharePoint 2010]

  • Root/admin access for user account

    I'm not sure the best way to explain this, but, I want my user account to be able to write/read ANY file on my HDD. How do I enable that in Lion? I've already added my user to the admin group, but, to no avail. Essentially I want to do $> sudo chmod -R a+rwx /, but, without having to do that.
    Yes, I understand that your everyday account shouldn't have this type of access and you should only elevate privleges when necessary. W/ that in mind, I'd really appreciate answers (or links) detailing how to do this and not explaining why I shouldn't do this.
    Thanks, and let me know if I should explain what I need in more detail.
    - Matt

    The top level of the hard drive has always been an admin-only area. In 10.6 and earlier, the admin group could write there. Now in 10.7, only root can write there. It was changed for security reasons. Apple realized that not many people are following their security guidelines and are running as admin users all the time, and so they have tightened up security in Lion.
    User files should not be put there. Put them in your home folder or in /Users/Shared if you wish multiple users to access them.

  • Too late to add user account?

    I have been working in my administrator account since buying my iMac G5 in December. I understand the wisdom of using a user account instead. I am wondering if it is too late to add a user account. If I do that, can I import the folders and files from my administrator account to the user account?
    iMac G5 2.1 GHz with iSight   Mac OS X (10.4.7)  

    The easy way is to create a new administrator account, them demote your old account to non-administrator.

  • How to assign admin ight toother user accounts

    Hi All
    I have a ZESM Server in my Company, And I want to assign some helpdeskt to manage the Policy deliver, but I could not see any setting about admin rights setting page.
    Who could teach me how could set other user account to be extra admin?
    wencheng

    wyld,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://forums.novell.com/

  • Possible to create separate passwords for admin and main user account?

    Hello,
    My ex wife is going to lend me her Macbook so I can open a separate account to transfer 30K critical business emails from my current Macbook Pro to Mail.app whilst it gets replaced by Apple.
    I still need to work with these emails over the week I'll be left without the computer.
    I was thinking, when requesting to import the mailboxes from my External HD, will it ask for a administrators password?
    She's a bit paranoid about giving me it if that's the case, even though I couldn't give a toss... so is there a way to password protect her main user account with one password, and create another admin password for importing an external mail folder - as OSX sometimes asks for an admin password to install apps etc.
    If I can just use a guest account and import the 'Mail' and 'Mail Downloads' folders from my library to a separate Mail.app on her computer without a password, then great.
    If it's the case the admin password is needed, please let me know ASAP so we can make arrangements for her to hang around to type it in whilst I initially make the transfer - which would be a right royal pain because I'd have to tidy the house up and put some putpourri out and ****.
    TIA

    She can create a new account for you to use. She can set it up as a new Standard account which restricts you from admin privileges. You can use the same username and password as you use on your machine. You will have access to the standard OS X applications such as Mail so you can download your email into a separate account. This can be configured to be exactly the same Mail account you use on your machine.
    Once your use of her machine is finished and you've transferred your data to your machine, she can log into her admin account and delete the Standard account you were using.

  • Access admin share from Users account. UAC into admin.

    Server 2012 R2 domain.
    I want USERS to be able to UAC into Admins and access Admins shares.
    To be clear: I want to type \\svr1.horse.local\c$ from a USER account without Admin rights, to be able to access that share.
    I have added LocalAccountTokenFilterPolicy, and set it to 1. No difference, and yes I have restarted. :)

    Hi,
    Another way to access Administrative Shares is to Disable UAC Admin Approval mode for all administrator accounts.
    Checkout the below link for article on Access Denied for Admin Shares, Disabling the UAC restrictions and Disabling UAC Admin Approval mode,
    http://4sysops.com/archives/access-denied-to-administrative-admin-shares-in-windows-8/ 
    Regards,
    Gopi
    JiJi
    Technologies

  • Migrating user account on same computer?

    I thought I'd be able to find the answer to this just by searching the forum, but everything related to what I wish to do seems to be talked about in terms of one computer to another. However I wish to migrate from one account on my computer to a fresh one on the same computer, which seems like it would be simple, but I've been unable to figure it out on my own.
    The background is this: my G5 being four years old, my main user account that I have been using all this time has become a bit "sluggish." I created a new account and there is a marked difference between their responsiveness, both system-wide and on-line, so instead of troubleshooting what is bogging down the old account I thought I would just migrate over to the new one. Also, I was running the old account as admin, which I understand is not advisable, so I figured I would keep the old account for admin purposes while performing my day-to-day activities in the new account.
    I was surprised to find that there is no way for me to easily access all my files on my old account from my new account (read and write) simply by changing a global permission. This would have been the "ideal" way for me to make this adjustment, as it really wouldn't matter which of these two accounts I logged in from, everything would be the same. Am I missing something here?
    Barring a solution to that, I don't necessarily mind "starting fresh" and basically treating the accounts as separate computers. Address Book and iCal should be easy enough to export from the old account and import into the new account. Mail on my old account has grown huge (4GB) so I was planning to archive anyway with 3rd party software and start from scratch. The files I'm currently working on I will copy over, and then I guess anything prior that I need to refer to in the future I will just have to log in to the old account and copy over piecemeal. (Is there another way, other than simply copying 100% of my files from the get-go?)
    If I'm understanding all of the above correctly, my only concerns are:
    1) Applications. When I launch 3rd party apps that require registration from the new account, some seem to be having some issues. Would copying the "Application Support" folder from my old account solve this, or will I only be able to use these apps from one account on my computer at a time?
    2) iTunes, specifically as regards my iPhone. Will I need to log into my old account each time I wish to sync with my iPhone? Is there any way that by instead syncing with the new account that I can mess things up and cause my phone or my apps to be de-authorized?
    Many thanks in advance for any guidance you can give here. I hope I am not going about all this backwards and should rather just be trying to "clean up" the old account rather than make a new one to "mimic" it?
    Thank you,
    Josh

    I recommend making a full backup of your system before trying this.
    read the above post of mine for finding out the short user name of your second account and group name of your first account.
    Macintosh-HD -> Applications -> Utilities -> Net Info Manager
    You can use the net info manager to add a user to the group. although I think the single command is easier to use. You can copy the first portion into terminal and type in the variable and information.
    Here is the Net Info Manager way:
    in the middle column click on groups. this will bring out the list of groups. Scroll down to your group from your first userid and click on at.
    Click on the lot on the lower left-hand corner of the screen. Fill in your administrator password.
    Click on the down triangle for the list of groups.
    Click on edit: add
    fill in your group name.
    Mac OS X uses Unix permissions.
    You will need to use BatChmod to change the permissions. Mac OS X doesn't let you change the permission to let others look in directories -- this is called the execution permission. The picture directory doesn't let others look at its files. You need to change this. You need to set the read-only and the execution permissions. And change it on group and other/everyone.
    !http://farm4.static.flickr.com/3265/3180927160_fabd018171.jpg?v=0!
    Sometimes things are not updated as you would expect. I noticed that the Red minus bar on a folder doesn't go way when I changed the permissions. I had to log off the user. You may want to be boot after changing the execution permission. It shouldn't be necessary.
    "BatChmod is a Cocoa utility for manipulating file and folder privileges in Mac OS X. It allows the manipulation of ownership as well as the privileges associated to the Owner, Group or others."
    http://www.macchampion.com/arbysoft/Welcome.html
    debate
    You can use the get info command to find out file permissions and make the changes.
    Click on the file of interest. Press command i (⌘-i)
    Each file has an owning user and a group of users that are allowed to access the file. Also, there is a another access for all users. The owning user is the UID field. The group of users is the GID.
    You could add yourself to your first Group. This would allow you to look at any file your wife owns.
    The NetInfo Manager application allows you to make this change.
    Macintosh-HD -> Applications -> Utilities -> NetInfo Manager
    In the middle column is the function. Pick users in the middle column then select the user of interest in the right column. Find out what group you and your wife are in.
    Now go back to the middle column and pick the Group. Now pick your wife's group. Now add your group to your wife's group. To add an item to a group, you need to look up and find the pulldown called directory > insert value.
    File system permissions
    http://en.wikipedia.org/wiki/Filesystempermissions
    Robert

Maybe you are looking for