It should be report alright but for me it's no problem because the iis is internal, and it's to host a webservice, this is is only to be used from another iis server that its published on the outside, and the calls are made by C# code, the code makes all the changes to AD, exchange, iis, filesystem and etc, it's a provisioning service, there by i need those admin privileges. The machine it self is secure. so i believe that it's no problem. I need to authenticate myself in the AD and iis webservice machine. :D

Ok thx for the tips, it fix the problem that was permissions of course, so here is the way to work; It's all on IIS 6. Create an Application Pool Add the Domain Admin User to the workstation group IIS WGL Ín the aplication pool, set the identity to work as that user. And that's it, it work on perfection, thank you alot again Ricardo José Santos

OK Forgot some issues, the object is created in the AD with perfection, everything works until.... mailbox.CreateMailbox("CN=SG1-DB1,CN=SG1,CN=InformationStore,CN=VMEX02,CN=Servers,CN=First Administrative Group," + "CN=Administrative Groups,CN=Portugal Telecom,CN=Microsoft Exchange,CN=Services,CN=Configuration," + "DC=lab,DC=tasp,DC=local"); this is when he trows an error of CATASTROPHIC ERROR The permissions are set in the machine.config, and the impersonation is done by the DirectoryEntry Object, this is, when i initalize the object i provide the credentials of an domain admin user. So permissions should be covered. I also tried to place the impersonationcontext in, but it didn't work also... Thx a lot, ricardo snatos

Hello people, i'm having a big trouble with this thing of creating user, i developed a code to create users in Active directory and mailenable it, i always worked fine, (developer platform: Windows XP, IIS 5), but now the project is finished, and i passed it into production, so what appen: (production platform: Windows 2003 server, IIS6) Running as a console it works fine, no problem, but i need some part to run as a webservice, and boom it blows up on me. various error messages but the most consistent is "Catastrophic Error". Here is a simple code that i'm testing now, attention this works fine in IIS 5, and Windows XP, but not in IIS6, all permissions is set and ok. public string CreateMailbox(string user) { try { StringBuilder sb = new StringBuilder(); string ouDN = "LDAP://OU=domainuserOU,OU=GlobalOU,DC=LAB,DC=TASP,DC=LOCAL"; DirectoryEntry deOU = new DirectoryEntry(ouDN,"Administrator","password",AuthenticationTypes.Secure | AuthenticationTypes.ServerBind); object obj = deOU.NativeObject; sb.AppendFormat("CN={0}",user); DirectoryEntry deUser = deOU.Children.Add(sb.ToString(),"user"); deUser.Properties["sAMAccountName"].Add(user); sb = new StringBuilder(); sb.AppendFormat("{0}@lab.tasp.local", user); deUser.Properties["userPrincipalName"].Add(sb.ToString()); deUser.CommitChanges(); deUser.Invoke("SetPassword","userpassword"); deUser.CommitChanges(); deUser.Properties["userAccountControl"].Value = 0x200; deUser.CommitChanges(); IMailboxStore mailbox; obj = deUser.NativeObject; mailbox = (IMailboxStore)obj; mailbox.CreateMailbox("CN=SG1-DB1,CN=SG1,CN=InformationStore,CN=VMEX02,CN=Servers,CN=First Administrative Group," + "CN=Administrative Groups,CN=Portugal Telecom,CN=Microsoft Exchange,CN=Services,CN=Configuration," + "DC=lab,DC=tasp,DC=local"); deUser.CommitChanges(); }catch(Exception err) {return err.Message + err.StackTrace;} return "user created with success!"; } thank u veri much