bobfox

Hello. I am using ADSI / LDAP to change a user's password in Active Directory.
The program is ran under a service account for the different domains...

The problem is that occasionally, I get "Access Denied" when attempting to change the password. I am using the SetPassword method.

In the past the users had permissions, particularly the SELF permission that caused the denial of access. But since then, the probelm has occurred in another domain and they claim the permissions for the service account, OU path, user, etc... is correct.

Any ideas on what it could be?

Rory

Perhaps the user account has "user cannot change password" set, or if you're using the administrative reset password facility check the LDAP/ADSI Bind User's permissions on the AD Objects themselves.