"Access is Denied" or "0x80005000" during Create User activity in Active Directory package

[mcutlyp]

Hi,

I’ve configured Remote Debugging to use a domain user account in the Domain Admin and Enterprise Admin groups (via an Unattended Robot running on the DC) and I’ve confirmed that UiPath is able to access and perform actions on the server as this account without issue.

Logging into the server with this account, I’m able to create users in AD without issue.

However, using the Create User activity from the Active Directory package, I get the following error:

Create User: An error has occurred: Unknown error (0x80005000)

I found this forum post that fixed the same issue by using v1.3.1 of the package (for reference, I’m getting the above error with v1.5.0).

Using v1.3.1, I get a different error:

Create User: An error has occurred: Access is denied.

These errors happen consistently for any activity that would modify AD, but activities that only read from AD work without issue.

It seems strange that access would be denied, since as mentioned earlier, the account is part of both the Domain Admins and Enterprise Admins security groups, and the account can create users in Active Directory Users and Computers without issue. This is a freshly installed Windows Server 2022 VM.

Any help is greatly appreciated.

Thanks,
Max

[mcutlyp]

I fixed this by giving the account Full Control over “This object and all descendant objects” on a parent OU under which I was trying to create the user. It already had Full Control over “This object only” through Domain Admin, but I guess it also needed “all descendant objects”.

I should note that by giving it only “Create all child objects” and “Delete all child objects”, the error changed to “Exception has been thrown by the target of an invocation”, but digging into the exception it turned out to be another Access Denied (0x80007005) - hence, Full Control.

I should also add that the same original error 0x80005000 occurs on all versions later than 1.3.1.