While running get-qadcomputer -includeallproperties against a Server 2012 R2 Domain Controller, you may get the following error: "Get-QADComputer : An operation error occurred". But if you run it against a Server 2008 R2 Domain Controller, the comand succeds.
Get-QADComputer : An operation error occurred.
At line:1 char:1
+ Get-QADComputer -IncludeAllProperties
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Get-QADComputer], DirectoryAccessException
+ FullyQualifiedErrorId : Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.DirectoryAccessException,Quest.ActiveRoles.
ArsPowerSellSnapIn.Powershell.Cmdlets.GetComputerCmdlet
The problem occurs when using a switch -IncludeAllProperties. On 2012 systems, Microsoft has introduced certain attributes that cannot be read without special permissions (even Administrator does not have access to those out of the box) and ARS tries to read all the properties based on AD schema.
WORKAROUND
Please use the switch -IncludedProperties and explicitly specify the properties that you need.
STATUS
Defect ID TF00369174 has been logged. Request to the specific attributes should be excluded on a future release of the product. If you require this immediately corrected, please contact support for a hotfix referencing the defect ID TF00369174.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy