Error Trying to delete a user...

Question

I am having trouble deleting a user using WSP.  One of my customers contacted me regarding this error, and I have been unable to delete the user as well.  Deleting other users in the same OU have not been a problem, they where deleted with no problems.

The error I am getting is as follows;

System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> System.Exception: Error executing 'DELETE_USER' task on '' ORGANIZATION ---> System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> The directory service can perform the requested operation only on a leaf object. at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at WebsitePanel.Providers.HostedSolution.Organizations.DeleteUser(String loginName, String organizationId) at WebsitePanel.EnterpriseServer.OrganizationController.DeleteUser(Int32 itemId, Int32 accountId) --- End of inner exception stack trace --- at WebsitePanel.EnterpriseServer.OrganizationController.DeleteUser(Int32 itemId, Int32 accountId) --- End of inner exception stack trace ---

 

I have looked on MSDN with regards to this error and found it to be related to not having the proper rights to deleting the object.  But how is it this is only effecting this account.  The user is not a member of any admin groups,etc...

Little help!!!

Regards.

Answer 1

Hi Soronery,

 

Manual WebsitePanel Enterprise Server Database changes required).

 

Important: Backup WebsitePanel Enterprise Server Database!!!

 

Open WebsitePanel Enterprise Server Database > Find and open dbo.ExchangeAccounts table > Find required AD user account you want to remove > Change AccountType value from “existing/old” to “7” or “4” (sorry… just can’t remember everything) ;-)

 

Open your panel > HO > remove problematic account (try to add from the scratch – just checking steps)

 

Make sure, it was removed under ADUC > required HO

 

Currently… can’t say the root of this issue (maybe somehow connected to latest environment issues or something like that).

 

Just let us know, in case you need our assistance (e-mail below).

 

Waiting for you reply.

 

Thanks.

---

Best regards, Dmitry Fitsner [e-mail] | WebsitePanel Installations, Support & Consulting | Enterprise Solutions Planning & Deployment & Support. Website: ExpertServices.us

Answer 2

Hi there,

Many thanks for the reply, I have followed the steps recommended but I now have another problem.  The account is still in ADOU and not showing in WSP at all.  When I go to delete the account from the OU I get a message saying;

Object "joe.blogs" contains other objects etc...   WARNING: If you select Use Delete Subtree server control check box, all objects within the subtree, including all deleted-protected objects, will be deleted, and the deletion cen not be canceled.

Little bit uncertain here, is this normal for when editing WSP dbo's, does it effect the AD like this?

Kind regards

Answer 3

Hi Soronery,

It doesn't affect AD, but connected to WSP changes only (possibility to remove via the panel).

Make sure AD account is not related with another hosted services > Remove via ADUC.

Please keep me informed (e-mail below).

Thanks.

 

---

Best regards, Dmitry Fitsner [e-mail] | WebsitePanel Installations, Support & Consulting | Enterprise Solutions Planning & Deployment & Support. Website: ExpertServices.us

Answer 4

One scenario where this happens for us is when someone has an Exchange 2010 mailbox with activesync device relationships. When the "Mailbox" is deleted, a subfolder is left on the object for activesync and when we try to delete the "User" the above error is received because of these child objects. We haven't found a solution yet but are looking into either deleting the container and all leaf objects, or having the delete mailbox routine check for and delete this specific child object.

Does anyone have an opinion on which solution is better?

Answer 5

Just ran into the same thing. Any word on a patch for this? The ActiveSync container, that Jon mentioned exists for pretty much every user on our platform ...

Thx&Rgds,
M.

Answer 6

Hello,

Sorry... It has been tested once... and I was able to remove it under the panel...

So, probably we need to continue ou investigations with it...

Please send us as much as possible related information (step by step + screenshots appreciated) / e-mail below.

Thank you for the catch.

---

Best regards, Dmitry Fitsner [e-mail] | WebsitePanel Installations, Support & Consulting | Enterprise Solutions Planning & Deployment & Support. Website: ExpertServices.us ---ORDER ANY ENTERPRISE DEPLOYMENT AND GET A SECOND 25%-100% FREE !!!

Answer 7

Using Windows 2008 R2 domain controllers,

Create an Exchange 2010 user and connect an active sync device,

Then try to delete the Mailbox.

 

I haven't actually tested this, but I think it's simply a matter of adding the "true" to the DeleteADObject call: ActiveDirectoryUtils.DeleteADObject(path, true);

 

Sources\WebsitePanel.Providers.HostedSolution\OrganizationProvider.cs

        internal void DeleteUserInternal(string loginName, string organizationId)
        {
            HostedSolutionLog.LogStart("DeleteUserInternal");
            HostedSolutionLog.DebugInfo("loginName : {0}", loginName);
            HostedSolutionLog.DebugInfo("organizationId : {0}", organizationId);
           
            if (string.IsNullOrEmpty(loginName))
                throw new ArgumentNullException("loginName");

            if (string.IsNullOrEmpty(organizationId))
                throw new ArgumentNullException("organizationId");

            string path = GetUserPath(organizationId, loginName);                       
            if (ActiveDirectoryUtils.AdObjectExists(path))
                ActiveDirectoryUtils.DeleteADObject(path);

            HostedSolutionLog.LogEnd("DeleteUserInternal");
        }