Hi Matthias,

Thank you for your question.  A colleague will contact you to investigate this 
issue.

Regards,
Mark Miller
Escalation Engineer
US-CSS DSC PROTOCOL TEAM

-----Original Message-----
From: Matthias Dieter Wallnöfer [mailto:[email protected]] 
Sent: Saturday, November 13, 2010 9:47 AM
To: Interoperability Documentation Help
Cc: [email protected]
Subject: MS-LSAD 3.1.4.7.10-12 CreateTrustedDomain* question

Hi dochelp people,

the calls "CreateTrustedDomain*" allow to create trusted domain objects. 
Now the question is: what AD security user is used to create them? It is 
"SYSTEM"?

Since otherwise we run into the following constraint (taken from MS-ADTS 
3.1.1.5.2.2):
> The structural objectClass is not a Local Security Authority 
> (LSA)-specific object class (section
> 3.1.1.5.2.3). If it is, Add returns unwillingToPerform / 
> ERROR_DS_CANT_ADD_SYSTEM_ONLY.

Thanks,
Matthias Wallnöfer

_______________________________________________
cifs-protocol mailing list
[email protected]
https://lists.samba.org/mailman/listinfo/cifs-protocol

Reply via email to