Issue description  

When attempting to create or modify a user in ADManager Plus, the following error appears:

Error code: 8007001f - A device attached to the system is not functioning.

This indicates an issue with input data, attribute configurations, or system components preventing the operation from completing successfully.

Possible causes

1. Invalid characters in naming attributes: Special characters in attributes, like Name, Logon Name, or SAM Account Name, may be unsupported.

2. Incorrect naming format: If a required attribute (e.g., Last Name, First Name, or Initials) is missing, predefined formats such as LastName.FirstName.Initials may cause the error.

3. Insufficient account permissions: The service account does not have the necessary permissions to modify user attributes.

4. Corrupt .NET framework: In some cases, system-level corruption of .NET components can trigger this error, requiring a health check and reinstallation.

5. Low disk space or RAM on the DC: In some cases, the RAM or disk space on the domain controller (DC) might be too low, causing errors.  

Prerequisites  

• Have administrative access to the ADManager Plus admin console.

• Have .NET Framework installation files available for troubleshooting and reinstallation if needed.

Resolution

Step 1: Review naming attributes for invalid characters

1. Identify the attributes causing the error (e.g., Name, Logon Name, or SAM Account Name).

2. Remove any special or unsupported characters that Active Directory restricts, such as:
   \ / : * ? " < > | ; , + = [ ] ( ) { }

3. Try creating or modifying the user again after making the necessary changes.

Step 2: Verify the format for naming attributes

1. Check the configured naming format in ADManager Plus.

2. Ensure that attributes like LastName, FirstName, or Initials exist if they are part of the format.

3. Modify the format or populate the missing attributes to prevent errors.

Step 3: Check permissions

1. Right-click the domain or a specific OU and select Delegate Control... to assign permissions to the service account.

2. Follow the Delegation of Control Wizard to grant the Read all properties and Write all properties permissions for user objects and OUs.

3. Test the permission changes on a single user account before applying them widely.

Step 4: Check the RAM and disk space on the DC

1. Navigate to Application/Directory Settings > Active Directory > click the Edit icon and move a different DC to the top of the DC list. Input the password of the service account and try again.

2. This error might also occur if there is little to no space available in the C drive of the DC.

  Tips    

• Define and enforce a consistent naming format for Active Directory objects to prevent errors.

• Adjust ADManager Plus settings to automatically prevent users from inserting unsupported characters in naming fields.

 How to reach support