Hi,
I have a user account in my AD which is a TRUST_ACCOUNT , and also is a duplicate, I mean it has DN in the form of :
CN={DomainName}$\0ACNF:{GUID},CN=Users,DC=XXXXXX,DC=com
how can I remove this object?
I tried to generate a fake trust and remove the trust (described here:https://www.privalnetworx.de/active-directory-interdomain-trust-account-phantom) but that could not delete the object.
I get Error:
ldap_delete_s(ld, "CN={DomainName},CN=Users,DC=XXXXXX,DC=com");Error: Delete: Insufficient Rights. <50>
Server error: 00000005: SecErr: DSID-031A1190, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
Error 0x5 Access is denied.