Microsoft KB Archive/235652

= XADM: DS_E_CONSTRAINT_VIOLATION Error When Adding Many Accounts into the Permissions Tab =

Article ID: 235652

Article Last Modified on 10/27/2006

-

APPLIES TO


 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q235652





SYMPTOMS
If you add many Windows NT accounts on the Permissions tab of an object in the Exchange Server Administrator program, you may get the following error message:

An internal processing error has occurred: constraint violation. The value specified for an attribute is either too big, too small, or not valid.

Microsoft Exchange Directory

ID No: DS_E_CONSTRAINT_VIOLATION.



CAUSE
This is by product design.



WORKAROUND
To work around this problem, create a Windows NT group and add the Windows NT accounts to which you want to give permissions to that group. Then, add the Windows NT group to the Permissions tab.



MORE INFORMATION
The Windows NT accounts added to an object's Permissions tab are stored in the NT-Security-Descriptor attribute for the object. The maximum length of the attribute NT-Security-Descriptor in the Exchange Server directory is 4096 bytes. If many Windows NT accounts are added to the Permissions tab, the length of the value for the attribute NT-Security-Descriptor can exceed 4096 bytes, and when you try to save the value, the error is logged.

Additional query words: schema

Keywords: kbprb KB235652

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.