000025342 - Error: 'A Windows 2000 constraint on Users was encountered while saving this User. Check that Windows allows your modifications to this user.'

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000025342
Applies ToRSA ClearTrust 5.0.1 Entitlements Server (EServer)
Microsoft Active Directory
IssueError: "A Windows 2000 constraint on Users was encountered while saving this User. Check that Windows allows your modifications to this user."
Unable to update user property
With verbose logging enabled on Active Directory, the following error is observed when trying to modify a user property:

The LDAP server returned the following error string:
00002016: SvcErr: DSID-031A0B56, problem 5003 (WILL_NOT_PERFORM), data 0
CauseCN cannot be modified like other attributes. Since this is an Active Directory read-only attribute and ClearTrust tries to update it upon modifying ANY of the User Properties assigned to the user, the above error will be generated
ResolutionTo correct this issue, edit the CN User Property via the ClearTrust Admin GUI and select "Read only".
WorkaroundCN was added as a ClearTrust User Property
Legacy Article IDa18162

Attachments

    Outcomes