An account disabled outside of Directory and Resource Administrator (DRA) can be re-enabled by a Sec (NETIQKB41466)

  • 7741466
  • 02-Feb-2007
  • 03-Oct-2011

Environment

Secure Password Administrator 1.0

Situation

An account disabled outside of Directory and Resource Administrator (DRA) can be re-enabled by a Secure Password Administrator (SPA) user.

If you disable an account outside of Directory and Resource Administrator, unlocking an account via Secure Password Administrator enables the account.

Resolution

Secure Password Administrator (SPA) version 1.0 Hotfix NETIQKB41466 ensures a user account that has been disabled through other tools (such as Active Directory Users and Computers) remains disabled when you use Secure Password Administrator to reset the account password or unlock the account.

To install this hotfix, run the SPA10000_Hotfix41466.exe file on your Secure Password Administrator Web server computer.

This hotfix modifies the SpaCommon.dll file on the Secure Password Administrator Web server computer. By default, this file is located in the Program Files\NetIQ\SPA folder.

For more information, contact NetIQ Technical Support at https://www.netiq.com/support/contactinfo.asp.



Cause

If the Account Cache Refresh for Directory and Resource Administrator (DRA) has not run, DRA incorrectly sets the Enable flag.

Additional Information

Formerly known as NETIQKB41466