This widget could not be displayed.
This widget could not be displayed.

Flow Designer fails create user with error code 203b

Ryan38
Tera Contributor

Hi all, 

I have an issue that when flow designer create AD accounts, sometime it fails with the error as below.

 

A local error has occurred
HRESULT: [8251]

Stack Trace: at Microsoft.ActiveDirectory.Management.AdwsConnection.ThrowExceptionForErrorCode(String message, String errorCode, String extendedErrorMessage, Exception innerException)
at Microsoft.ActiveDirectory.Management.AdwsConnection.ThrowException(CustomActionFault caFault, FaultException faultException)
at Microsoft.ActiveDirectory.Management.AdwsConnection.SetPassword(SetPasswordRequest request)
at Microsoft.ActiveDirectory.Management.ADWebServiceStoreAccess.Microsoft.ActiveDirectory.Management.IADAccountManagement.SetPassword(ADSessionHandle handle, SetPasswordRequest request)
at Microsoft.ActiveDirectory.Management.Commands.ADPasswordUtil.PerformSetPassword(String partitionDN, ADObject directoryObj, SecureString newPassword)
at Microsoft.ActiveDirectory.Management.Commands.ADAccountFactory`1.ADAccountPostCommitFSRoutine(DirectoryOperation operation, T instance, ADParameterSet parameters, ADObject directoryObj)
at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.FactoryCommitSubroutinePipeline.Invoke(DirectoryOperation operation, T instance, ADParameterSet parameters, ADObject directoryObj)
at Microsoft.ActiveDirectory.Management.Commands.ADNewCmdletBase`3.ADNewCmdletBaseProcessCSRoutine()
at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()
at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()

 

Windows error code: 203b

 

It appears that particularly the account was created but missing all configurations (Configurations are set via PowerShell script)

 

Any guidance is much appreciated.

 

2 REPLIES 2

Saiganeshraja
Kilo Sage
Kilo Sage

It comes because if the client sends a request with the NewPassword element that does not meet the password policy, then the server MUST return a SOAP fault with a SetPasswordFault fault subcode.

For the General Password Policy:

http://msdn.microsoft.com/en-us/library/cc245669.aspx

 

Mark correct,if it helps.

Thank you for your reply.

 

Im not sure if it's the right reason as it only happens on some requests only but not all.

Also, we use the static password which definitely match the policies.