Closed
Description
Problem description
Using ADObjectPermissionEntry on Windows Server 2025 to grant a service account the permission replicating directory changes, I get this error:
Cannot find a provider with the name 'DC=contoso,DC=local,Microsoft.ActiveDirectory.Management.dll\ActiveDirectory'.
Verbose logs
VERBOSE: [2025-03-17 09:54:12Z] [VERBOSE] [SP]: LCM: [ Start Test ]
[[ADObjectPermissionEntry]GrantReplicatingDirectoryChanges]
VERBOSE: [2025-03-17 09:54:12Z] [VERBOSE] [SP]:
[[ADObjectPermissionEntry]GrantReplicatingDirectoryChanges] Retrieved the AD Drive full PSPath of 'Microsoft.ActiveDirectory.Management.dll\ActiveDirectory:://RootDSE/'. (OPE0008)
VERBOSE: [2025-03-17 09:54:12Z] [VERBOSE] [SP]: LCM: [ End Test ]
[[ADObjectPermissionEntry]GrantReplicatingDirectoryChanges] in 0.2260 seconds.
VERBOSE: [2025-03-17 09:54:13Z] [ERROR] PowerShell DSC resource MSFT_ADObjectPermissionEntry failed to execute Test-TargetResource functionality with error message: Cannot find a provider with the name 'DC=contoso,DC=local,Microsoft.ActiveDirectory.Management.dll\ActiveDirectory'.
DSC configuration
ADObjectPermissionEntry GrantReplicatingDirectoryChanges
{
Ensure = 'Present'
Path = "DC=contoso,DC=local"
IdentityReference = "serviceAccountName"
ActiveDirectoryRights = 'ExtendedRight'
AccessControlType = 'Allow'
ObjectType = "1131f6aa-9c07-11d1-f79f-00c04fc2dcd2" # Replicate Directory Changes Permission
ActiveDirectorySecurityInheritance = 'All'
InheritedObjectType = '00000000-0000-0000-0000-000000000000'
PsDscRunAsCredential = $DomainAdminCredsQualified
}
Suggested solution
It seems to happen because the path contains the domain's DN as a prefix, which was not present in the previous versions of the module:
DC=contoso,DC=local,
Show the PSPath value for AD:
Import-Module ActiveDirectory
(Get-Item -Path 'AD:').PSPath
Microsoft.ActiveDirectory.Management.dll\ActiveDirectory:://RootDSE/
Operating system the target node is running
OsName : Microsoft Windows Server 2025 Datacenter Azure Edition
OsOperatingSystemSKU : DatacenterAzureServerEdition
OsArchitecture : 64-bit
WindowsVersion : 2009
WindowsBuildLabEx : 26100.1.amd64fre.ge_release.240331-1435
OsLanguage : en-US
OsMuiLanguages : {en-US}
PowerShell version and build the target node is running
PSVersion 5.1.26100.2161
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.26100.2161
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
ActiveDirectoryDsc version
Name Version Path
---- ------- ----
ActiveDirectoryDsc 6.6.1 C:\Program Files\WindowsPowerShell\Modules\ActiveDirectoryDsc\ActiveDirectoryDsc.psd1
Metadata
Metadata
Assignees
Labels
No labels