Reset Password Right

[Sneid]

Hi

I'm trying to apply the "reset password" right to a computer object in Active Directory..
To do this, i used the ActiveDS lib

Whatever i do, i get the 'The security ID is invalid

Here is my little code (in C#)

ActiveDs.IADs dsobject
ActiveDs.IADsSe curityDescripto r sd
ActiveDs.IADsAc cessControlList dacl
ActiveDs.Access ControlEntry NewAce
long lflags
string ComputerPath

ComputerPath="L DAP://"+Domain.ToStri ng()+"/CN="+ComputerNa me.ToString()+" ,OU=Just Created,OU=IT,O U=Bruxelles,OU= Belgium,OU=all computers,DC=do main,DC=com"

dsobject = dsobject.Get(Co mputerPath)

sd = dsobject.Get("n tSecurityDescri ptor")

dacl = sd.Discretionar yAcl

NewAce.AccessMa sk="accessright s"
NewAce.AceType= "accesstype "
NewAce.AceFlags ="aceinheritfla gs"
NewAce.Trustee= UserName.ToStri ng()

dacl.AddAce(New Ace)
sd.Discretionar yAcl = dacl

dsobject.Put("n tSecurityDescri ptor",sd)
dsobject.SetInf o()

I can't figure where's the problem... Is it the approach ? Do i have to use something else ?..

Thanks for reading :

Sneid

[Willy Denoyette [MVP]]

You need to set the "AccessMask " bit8 (0x100) and the "ObjectType " guid
value 00299570-246d-11d0-a768-00aa006e0529 in the ACE.

Willy.

"Sneid" <sn******@hotma il.com> wrote in message
news:93******** *************** ***********@mic rosoft.com...

Hi,

I'm trying to apply the "reset password" right to a computer object in
Active Directory...
To do this, i used the ActiveDS lib.

Whatever i do, i get the 'The security ID is invalid'

Here is my little code (in C#) :

ActiveDs.IADs dsobject;
ActiveDs.IADsSe curityDescripto r sd;
ActiveDs.IADsAc cessControlList dacl;
ActiveDs.Access ControlEntry NewAce;
long lflags;
string ComputerPath;

ComputerPath="L DAP://"+Domain.ToStri ng()+"/CN="+ComputerNa me.ToString()+" ,OU=Just
Created,OU=IT,O U=Bruxelles,OU= Belgium,OU=all computers,DC=do main,DC=com";

dsobject = dsobject.Get(Co mputerPath);

sd = dsobject.Get("n tSecurityDescri ptor");

dacl = sd.Discretionar yAcl;

NewAce.AccessMa sk="accessright s";
NewAce.AceType= "accesstype ";
NewAce.AceFlags ="aceinheritfla gs";
NewAce.Trustee= UserName.ToStri ng();

dacl.AddAce(New Ace);
sd.Discretionar yAcl = dacl;

dsobject.Put("n tSecurityDescri ptor",sd);
dsobject.SetInf o();

I can't figure where's the problem... Is it the approach ? Do i have to
use something else ?...

Thanks for reading :)

Sneid