User not showing up from AD

avatar

I have a bizarre situation where only ONE user is not able to log in to RDMS using their AD credentials.

Normally the user just logs in and their account is automatically created, but I've clicked on "Import Users" in DVLS to try and manually import them and they are not in the list of users. All of the other users from the same OU are in the list, however.

Is there something in particular that a user needs to have?

All Comments (7)

avatar

Hello,

Is it possible that this user is disabled in AD?

Have you set a domain account that have full read permission over the entire domain in the Authentication credentials option in the DVLS Server Settings?



Best regards,

Érica Poirier

avatar

No, the account is not disabled, but it's worth noting that other disabled accounts ARE showing up anyway.

Yes, I've setup a domain account with full read permission. Every other user is there (120 odd) except this single user.

avatar

I also get this email when he tries to log in, but his password is definitely correct. I have tested by logging in to servers with it.

The following error was received by a user at 17/01/2017 11:23:30 AM
Error:
COMException - The user name or password is incorrect. at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_AdsObject() at System.DirectoryServices.PropertyValueCollection.PopulateList() at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName) at System.DirectoryServices.PropertyCollection.get_Item(String propertyName) at System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer() at System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit() at System.DirectoryServices.AccountManagement.PrincipalContext.Initialize() at System.DirectoryServices.AccountManagement.PrincipalContext.get_ConnectedServer() at Devolutions.RemoteDesktopManager.Managers.DirectoryServicesManager.FindByIdentity(DirectoryServicesQueryParameter parameters) in c:\Dev\devolutions\RemoteDesktopManager\Business\Managers\DirectoryServicesManager.cs:line 47 at Devolutions.Server.UserManager.FindUserInDomainWithNetBios(String userName, String password) in c:\Dev\devolutions\Websites\Server\Common\Managers\UserManager.cs:line 508 at Devolutions.Server.Controllers.APIControllers.v2.BackendApiController.DoLogin(HttpRequestMessage request, String userName, String password, ClientApplicationInfo clientApplicationInfo, String twoFactorID, TwoFactorInfo twoFactorInfo, String publicIPAddress, Byte[] sessionKey, String repositoryId, Boolean partialMode) in c:\Dev\devolutions\Websites\Server\Website\Controllers\APIControllers\BackendApiController.Login.cs:line 876 at Devolutions.Server.Controllers.APIControllers.v2.BackendApiController.Login2(HttpRequestMessage request, JObject requestData, Boolean partialMode) in c:\Dev\devolutions\Websites\Server\Website\Controllers\APIControllers\BackendApiController.Login.cs:line 313 at lambda_method(Closure , Object , Object[] ) at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.b__9(Object instance, Object[] methodParameters) at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken) --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Controllers.ApiControllerActionInvoker.d__0.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Filters.ActionFilterAttribute.d__5.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Web.Http.Filters.ActionFilterAttribute.d__5.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Filters.ActionFilterAttribute.d__0.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Controllers.ActionFilterResult.d__2.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Controllers.ExceptionFilterResult.d__0.MoveNext() --- Default
Source:
System.DirectoryServices

avatar

Hello,
Could you please run the PowerShell script attach to this post to compare two AD accounts?
Please use one AD accounts that currently works with the one that doesn't work.

It will be easier to compare these two accounts if you sort the results on the Attribute column.

Could you please send us the result at support@devolutions.net?
For your information, I have found this PowerShell script here http://pleasework.robbievance.net/howto-easily-compare-ad-attributes-between-users/


Best regards,

David Grandolfo

ADCompare.ps1

avatar

Hello,

I am modifying our domain diagnostic tool to reflect our latest changes. In the process, I experienced an issue much like yours, I am trying to replicate but cannot find the recipe at this time.

When I am done, are you willing to perform a few tests with that tool?

Maurice

avatar

Hi Maurice, happy to run the diagnostic's tool. Need to get this sorted out ASAP.

The script throws a stack of errors:

avatar

Easily fixed, did a search and replace for " to "

I'll send through the resutls