ASP.NET and ActiveDirectory General access denied error

Question

I have ASP.NET page to manage objects in ActiveDirectory. I use this class I can create a user object in AD successfully in my dev machine. When I deployed it to the server, I can only edit existing objects but I canNOT create a new user . I always get this exception General access denied error.

Is there any setting that I missed? Please help. Thank you

Answer 1

Are you using static credentials within IIS? Then ensure that the account has the required permissions to create new objects.

Are you using impersonation with IIS? Then make sure you're using the correct authentication setup. You can not use the default Windows authentication if you're trying to authenticate against another machine (your domain servers). That's called the Double-Hop Problem , and has been mentioned before , usually related to SQL Server and trusted connections, but will also affect any attempt to use the impersonated users credentials against other machines.