Keep Receiving: Error is: 'Insufficient access rights to perform the operation' When running script

Hello. I have a powershell script I run in our domain to disable AD accounts. Part of that also removes the users from all AD groups. That part of my script however keeps throwing up this Error is: 'Insufficient access rights to perform the operation'
error. 
Now from our Exchange server if I run this script with powershell, things work fine. But running it on the domain controller is when I get this error. Thoughts? 

Thanks Anna!
I was able to add this code below in to the script where it kept erroring out and it then worked. I had to point it to a different DC then it was running on. 
–Server comp1.test.server.com
Thanks again!

Similar Messages

  • Set-aduser : Insufficient access rights to perform the operation

    I am a domain admin, enterprise admin, exchange admin, domain user, and others.
    While running a PS on a DC as the administrator, The commands I'm running are ...
    $expdate = get-date -date '01/01/2014'
    set-aduser -identity testmail5 -accountexpirationdate $expdate
    I get the following error ...
    set-aduser : Insufficient access rights to perform the operation
    At line:1 char:1
    + set-aduser -identity testmail5 -accountexpirationdate $expdate
        + CategoryInfo          : NotSpecified: (testmail5:ADUser) [Set-ADUser], ADException
        + FullyQualifiedErrorId : Insufficient access rights to perform the operation,Microsoft.ActiveDirectory.Management.Comm
       ands.SetADUser
    I then switch to a different DC, the command 'might' work once, but will never run again in the same window.
    Then I tried this ...
    start-process powershell -verb runas
    That gave me an additional PS window, and I then tried running the commands again.
    Same error message.
    So I tried the following command ...
    $expdate = get-date -date '01/01/2014'
    set-aduser -server XXDC03 -identity testmail5 -accountexpirationdate $expdate
    Same error message.
    Is there any way that I can get around this problem?
    Please help.

    Keep in mind that the account used to open the PowerShell session must be the same account you're using to open ADUC. The error message means that Set-ADUser is trying to set the attribute for the account, but it's failing. Make sure to test with multiple
    different accounts, in case the access control list of the object you're trying to modify is the cause of the problem.
    Your PowerShell syntax is valid, so this isn't really a scripting question but a security/directory services question.
    -- Bill Stewart [Bill_Stewart]

  • Lync Server Control Panel : Insufficient access rights to perform the operation;

    Hi team,
    I have a strange problem in managing Lync users through control panel. But I can enable/disable and Manage users through power shell. Am getting an error " Insufficient Rights to perform the operations" when i try through control panel
    Please can someone help me urgently on tihs. I have all the users in a separate OU from where the RTC and CS groups are available. Is there any issue with the delegation?

    Hi,
    You will receive this error message when you attempt to manage Lync users who are members of protected admin groups in Active Directory (such as Enterprise Administrators etc.).
    Typically I use Lync Management Shell, so don't get this error often as it only occurs in the Control Panel.
    Editing the properties of the user object you are attempting to enable / disable in AD, and enabling inheritance on under the security tabs advanced options will also work around the problem, but you may not wish to do this. The inheritance change will revert
    itself in 15 minutes or so I believe.
    Perhaps someone can advise of an alternate solution through group membership / permissions, but as I don't have the issue often I've not looked into it at any great depth.
    Kind regards
    Ben
    Blog:www.gecko-studio.co.uk/ 
    Twitter:
      LinkedIn:
      Facebook:
    Note: If you find a post informative, please mark it so using the arrow to the left. If it answers a question you've asked, please mark the thread as answered to aid others when they're looking for solutions to similar problems
    or queries.

  • Orcladmin: "Insufficient access right to perform action" using oidadmin

    After sucessfully installing OID from 8.1.7 CD on Sun Solaris 8
    (SPARC) I can start the monitor and the oidldap. After
    sucessfully connecting with orcladmin using oidadmin I always get
    the same error (either using oidadmin on windows or solaris) when
    accessing "entry management", "schema management" or "audit log
    management":
    Insufficient access right to perform action.
    but the default ACP allows everyone (browse add delete)
    anyone else had the same problem?
    I tried to create the name server with OID with netca which
    obviously does not work either.

    Hi Christian:
    You say that you conencted to OID as "oidadmin". Since OID does
    not have any user account called "oidadmin" you were probably
    conencted as an anonymous user. If you are trying to connect as
    the administrator of OID the correct user account name is
    "orcladmin" with a default password of welcome. Try this and let
    me know if you sitll have troubles.
    Thanks,
    Jay Tomlinson

  • Cannot get on the Safari 2.04 Forum -keep receiving error message

    I can log in but cannot get to the Safari for Mac Forum anymore !
    Keep receiving error message - contact administrator -
    I click on the Forum link and keep getting the error -
    The search forums link works but the main forum link does not.
    Have they discontinued the 2.04 forum?

    Susie, As Rachel wrote, it a glitch on the Forums here.
    It's what happens when they're fixing things . . .
    sometimes called "moving the furniture."
    A couple of forums are like that over the past couple of days.
    One forum gets fixed, another gets wonky.
    Eventually, we're all hoping the furniture will look and work just fine.

  • Error while configuring SSL in OID 11g - LDAP 50 Insufficient Access rights

    HI,
    I am trying to configure SSL in OID 11g.As per the doc http://download.oracle.com/docs/cd/E12839_01/oid.1111/e10029/ssl.htm#CBHGBGAF ,i tried creating a Self-Signed Wallte using Fusion Middleware control,But i am getting an error LDAP 50: Insufficient access rights".I logged into Fusion Middle Ware control as Weblogic user.Is anybody faced this issue?.Thanks in advance.

    I am not sure how you tried, but I would recommend to do the following...
    1. Add the 'user1' to "OU=Franchisees,ou=People,dc=company,dc=com"
    2. Delete the 'user1' from 'OU=Internal,ou=People,dc=company,dc=com'

  • Dp* commands failed w/ SMSLdapObject: insufficient access rights to access

    My dpadmin list/modify fails to execute. The amSMS log is below. What aci I lost? Any help is appreciated.
    Regards
    11/20/2005 03:17:15:659 AM MST: Thread[main,5,main]
    SMSEntry: cache enabled: true
    11/20/2005 03:17:16:023 AM MST: Thread[main,5,main]
    SMSLdapObject: LDAP Initialized successfully
    11/20/2005 03:17:16:349 AM MST: Thread[main,5,main]
    Initialized LDAPEvent listner
    11/20/2005 03:17:16:412 AM MST: Thread[main,5,main]
    CachedSubEntries::getInstance DN: ou=DAI,ou=services,dc=sun,dc=com
    11/20/2005 03:17:16:432 AM MST: Thread[main,5,main]
    CachedSMSEntry::getInstance: ou=DAI,ou=services,dc=sun,dc=com
    11/20/2005 03:17:16:441 AM MST: Thread[main,5,main]
    SMSLdapObject.read() retry: 0
    11/20/2005 03:17:16:451 AM MST: Thread[main,5,main]
    WARNING: SMSLdapObject: insufficient access rights to access DN=ou=DAI,ou=services,dc=sun,dc=com
    11/20/2005 03:17:16:461 AM MST: Thread[main,5,main]
    ERROR: CachedSubEntries: unable to register for notifications:
    Message:The user does not have permission to perform the operation.
    at com.sun.identity.sm.ldap.SMSLdapObject.read(SMSLdapObject.java:231)
    at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:334)
    at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:326)
    at com.sun.identity.sm.SMSEntry.<init>(SMSEntry.java:162)
    at com.sun.identity.sm.CachedSMSEntry.getInstance(CachedSMSEntry.java:307)
    at com.sun.identity.sm.CachedSubEntries.<init>(CachedSubEntries.java:72)
    at com.sun.identity.sm.CachedSubEntries.getInstance(CachedSubEntries.java:204)
    at com.sun.identity.sm.ServiceManager.getVersions(ServiceManager.java:409)
    at com.sun.identity.sm.ServiceManager.serviceDefaultVersion(ServiceManager.java:427)
    at com.sun.identity.sm.ServiceConfigManager.<init>(ServiceConfigManager.java:94)
    at com.iplanet.am.sdk.AMCommonUtils.populateManagedObjects(AMCommonUtils.java:497)
    at com.iplanet.am.sdk.AMCommonUtils.<clinit>(AMCommonUtils.java:113)
    at com.iplanet.am.sdk.AMStoreConnection.<clinit>(AMStoreConnection.java:141)
    at com.sun.portal.desktop.context.DSAMEConnection.<init>(DSAMEConnection.java:89)
    at com.sun.portal.desktop.context.DSAMEAdminDPContext.init(DSAMEAdminDPContext.java:110)

    - what's the complete command ?
    - which user is used ?
    /ulf

  • SMSLdapObject: insufficient access rights to access

    The dpadmin command failed w/ SMSLdapObject: insufficient access rights to access. The amSMS log is below. What aci did I lose? Any help is appreciated.
    Regards
    11/20/2005 03:17:15:659 AM MST: Thread[main,5,main]
    SMSEntry: cache enabled: true
    11/20/2005 03:17:16:023 AM MST: Thread[main,5,main]
    SMSLdapObject: LDAP Initialized successfully
    11/20/2005 03:17:16:349 AM MST: Thread[main,5,main]
    Initialized LDAPEvent listner
    11/20/2005 03:17:16:412 AM MST: Thread[main,5,main]
    CachedSubEntries::getInstance DN: ou=DAI,ou=services,dc=sun,dc=com
    11/20/2005 03:17:16:432 AM MST: Thread[main,5,main]
    CachedSMSEntry::getInstance: ou=DAI,ou=services,dc=sun,dc=com
    11/20/2005 03:17:16:441 AM MST: Thread[main,5,main]
    SMSLdapObject.read() retry: 0
    11/20/2005 03:17:16:451 AM MST: Thread[main,5,main]
    WARNING: SMSLdapObject: insufficient access rights to access DN=ou=DAI,ou=services,dc=sun,dc=com
    11/20/2005 03:17:16:461 AM MST: Thread[main,5,main]
    ERROR: CachedSubEntries: unable to register for notifications:
    Message:The user does not have permission to perform the operation.
    at com.sun.identity.sm.ldap.SMSLdapObject.read(SMSLdapObject.java:231)
    at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:334)
    at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:326)
    at com.sun.identity.sm.SMSEntry.<init>(SMSEntry.java:162)
    at com.sun.identity.sm.CachedSMSEntry.getInstance(CachedSMSEntry.java:307)
    at com.sun.identity.sm.CachedSubEntries.<init>(CachedSubEntries.java:72)
    at com.sun.identity.sm.CachedSubEntries.getInstance(CachedSubEntries.java:204)
    at com.sun.identity.sm.ServiceManager.getVersions(ServiceManager.java:409)
    at com.sun.identity.sm.ServiceManager.serviceDefaultVersion(ServiceManager.java:42 7)
    at com.sun.identity.sm.ServiceConfigManager.<init>(ServiceConfigManager.java :94)
    at com.iplanet.am.sdk.AMCommonUtils.populateManagedObjects(AMCommonUtils.java:497)
    at com.iplanet.am.sdk.AMCommonUtils.<clinit>(AMCommonUtils.java:113)
    at com.iplanet.am.sdk.AMStoreConnection.<clinit>(AMStoreConnection.java:141)
    at com.sun.portal.desktop.context.DSAMEConnection.<init>(DSAMEConnection.jav a:89)
    at com.sun.portal.desktop.context.DSAMEAdminDPContext.init(DSAMEAdminDPContext.jav a:110)

    - what's the complete command ?
    - which user is used ?
    /ulf

  • Insufficient access rights registering Oracle Directory Integration Server

    Hi all!
    following steps I´ve done to use the Oracle Directory Integration Server.(I´ve installed Oracle 10g infrastructure - OID is running - I´m also able to apply successful with ODM and orcladmin account)
    - oidctl connect=mydb1 server=odisrv instance=1 stop
    - odisrvreg -h localhost -p 389 -D cn=orcladmin,cn=Users,dc=localhost;dc=com -w ,pass
    where pass is the password of orcladmin.
    -> now I get the following error:
    registering..
    Error javax.naming.NoPermissionException [LDAP:error code 50: Insufficient Access Rights]; remaining name 'cn=odisrv+orclhostname=maschine,cn=odi,cn=oracle internet directory' !
    Any idea ??
    Thanks for all help & comments.

    I have gone through the documentation for creating the script. But there is one thing which I am not able to understand i.e. Subscription Parameters.
    Can anyone tell me the use of subscription parameters? What is the role of subscription parameters in Oracle Lite and External Authentication.
    Regards
    Kapil

  • Insufficient Access Rights when trying to modify send as permissions on a public folder

    Where I work, we have 2 mailbox database servers and 2 cas servers on Exchange 2010, upgraded from Exchange 2003. We are finding that when trying to grant a user send as rights to a publlic folder we are getting an Insufficient Access Rights error. The
    bizzare thing is for one particluar folder we can amend the send as rights with no issue on one of the cas servers but not the other cas or either db servers.
    You would have thought if it was a user permissions issue i.e the adminsitrator not having sufficent rights it would fail on every server and likewise if it was a problem with the folder itself, why is it working on one of the cas servers? Also on
    the one server this particluar folder does allow us to amend the rights, when we try to amend others we get the same error 
    If anyone has come accross this before and knows a fix please share it.
    Thanks

    Hi,
    Please check the ownership of the affected public folder to make sure it points to the right server.
    Here is a similar thread which may help you, please following the suggests in this thread to check result.
    https://social.technet.microsoft.com/Forums/office/en-US/0960b944-82b2-42f1-b438-a7d57b7ab783/insuffaccessrights?forum=exchangesvrgenerallegacy
    Best regards,
    Belinda Ma
    TechNet Community Support

  • Error -5000 Insufficient Access Privileges - Can anyone help?

    Hi, I have been using logic since version 4.1 and have never had this problem. About 50% of the files I import or audio I record have problems when using the Audio editor in logic.. I can't do simple things like Normalize, Fade in/out/, Gain, Time & Pitch etc... All i keep getting back is 'Error -5000 Insufficient Access Privileges For Operation'. I've checked the files are on read & write however I cannot figure out why it will not let me do anything to the audio.. Any advice appreciated! Kai P.S I've updated to the latest Version of Logic Pro 7.2

    You should run "repair permissions" for your hard drives.
    Check the Apple Help manual on exactly how to do this,it's not hard to do.
    This is not a Logic Issue,but a file management issue...Access privileges is a term to describe what access level you have on each file on your computer.If you don't have write access,you cannot edit the file.
    I hope this helps,
    noeqplease

  • I can't open my Itunes keep receiving error message- The iTunes Library.itl file cannot be found or created. The default location for this file is in the "i Tunes" folder in the "Music" folder

    I can't open my Itunes keep receiving error message- The iTunes Library.itl file  cannot be found or created. The default location for this file is in the "i Tunes" folder in the "Music" folder. I have even tried removing and reinstalling iTunes and it still does work because I continue to receive this error message. Please Help!

    Anyone can help to advice how to solve this issue ?

  • Unable to install Adobe Digital Reader 3.0. Keep receiving error message "migration has stopped working" and then installation fails.

    Every time I try to install Adobe Digital Reader 3.0 I get an error message "migration has stopped working" and the installation fails. Is there a solution to this?

    Trying to install. Installation fails and I am unable to open it to migrate
    epub books to transfer to ereader
    In a message dated 8/31/2014 9:50:51 A.M. Eastern Daylight Time, 
    [email protected] writes:
    Unable  to install Adobe Digital Reader 3.0. Keep receiving error message 
    "migration has stopped working" and then installation fails.
    created by kglad (https://forums.adobe.com/people/kglad)  in 
    Downloading, Installing, Setting Up - View the full  discussion
    (https://forums.adobe.com/message/6688648#6688648)

  • When I try to sync my IPOD (3rd gen) on ITunes, I receive the following error message - you don't have enough access permissions to perform this operation

    When I try to sync my IPOD (3rd gen) on ITunes, I receive the following error message - you don't have enough access permissions to perform this operation..can anyone assist?

    See:
    iPhone - not enough access privileges: Apple Support Communities

  • Keep receiving error to launch adobe reader and accept agreement

    keep receiving error to launch adobe reader and accept agreement on a mac opening in safari

    You need to do what the message says... to launch an app in Mac OS you go to the Applications folder and find the Adobe Reader icon. Double click on it. If there is more than one, click on each in turn, accept any agreements, quit.

Maybe you are looking for

  • Production Order on basis of Material and Plant

    Hi, I want to know the table name from which i can get the Production Order on the basis of Material No and Plant no

  • How to get the user id after login

    i am using dreamweaver cs3 authintication behaviour. i want to get the user id on session varible. not the username but the user id of the table. cheers

  • Compressor never works for me

    I shot my friends music video with my Canon 7D, imported it straight into FCPX- edited it- sent it to compressor- chose 1080p HD Video sharing, and it never works. The compression fails everytime. I've tried other compression settings as well. Any he

  • IOS 4.2.1 + 3G data = hot phone & extremely rapid battery drain

    Anyone else having this issue? Since "upgrading" to iOS 4.2.1 on the weekend, it seems anytime I try to use the phone for data over 3G, it'll heat up like crazy and I can watch the battery drain in front of my eyes. Everything else works fine includi

  • Compensation between vendor/customer/GL account

    Hi Gurus, I have to balance the vendor 100731 in EUR, the customer 800003 in EUR, the GL account 341350950 with an item in GBP, without to create exchange with payment 208.744,80 u20AC. Which transaction I have to use? Thanks, ciao Michela