Article ID: 300137
Article Last Modified on 10/12/2005
APPLIES TO
- Microsoft Metadirectory Services 2.2 Service Pack 1
This article was previously published under Q300137
SYMPTOMS
A problem may occur with the Active Directory Management Agent (ADMA) when Group Policy is configured to set password length or complexity requirements. If the ADMA attempts to create an Active Directory user object with a password that does not meet the password complexity requirements, the following error is recorded in the Adma.log file:
This error is expected. However, after this error occurs, the ADMA exhibits the following incorrect behaviors:
- The next four user objects are exported after the object with the incorrect password. Although those four objects have valid passwords, they are created as disabled user objects (instead of enabled user objects).
- The ADMA stops processing users and terminates the synchronization process. The ADMA should continue processing the users. Users whose passwords meet the requirements that are established by the group policy should be created as enabled users; users whose passwords do not meet the requirements should be created as disabled users.
RESOLUTION
A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Microsoft Metadirectory Services service pack that contains this hotfix.
To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:
NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The typical support costs will apply to additional support questions and issues that do not qualify for the specific update in question.
The English version of this fix should have the following file attributes or later:
Date Time Size File name
----------------------------------------
30-May-2001 19:31 174,080 Cdir_ad.dll
NOTE: This hotfix requires Microsoft Metadirectory Services (MMS) 2.2 Service Pack 1 (SP1). This hotfix does not work with earlier versions.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
MORE INFORMATION
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
320718 Microsoft Metadirectory Services 2.2 Post SP1 Hotfix List
Additional query words: zoomit
Keywords: kberrmsg kbbug kbfix kbqfe kbhotfixserver KB300137
