Troubleshooting Code 80072032 – An invalid dn syntax
Introduction to Error Code 80072032
Code 80072032 occurs when you execute a VBScript with an invalid LDAP reference. A common scenario is that you are creating user objects in Active Directory. Another scenario is that you are adding members to a group with an inappropriate scope.
The Symptoms You Get 80072032
A WSH message box pops-up and the script does not execute as you hoped. One possibility is that you are using a WSCRIPT and you are missing a vital LDAP element in the script.
The Cause of Code 80072032
A clue to the problem lies in Error: line. There is something wrong with the description of the object. Most likely dn – distinguished name has not been properly specified, in this example, look for the LDAP reference in Line 13. Although the scripts says Char: 1, it may not be the very first character, what its saying is that it cannot parse that line. Check LDAP here
On investigating line 13, you see that there is no ‘cn=’ in front of the name. The script does not know how to interpret GuidoT. In fact, GuidoT is the user’s name, so just correct the script to read: cn=GuidoT.
Example 1 of Script for error 80072032
Note: The error is reported as Line 13, missing cn for example cn=GuidoT.
Note: Error 80072032 reports a dn (Distinguished name) error, whereas the code just needs a cn (common name). In most cases it’s only one element of the dn that is incorrect (CN=GuidoT).
Import users from a spreadsheet. Just provide a list of the users with their fields in the top row, and save as .csv file. Then launch this FREE utility and match your fields with AD’s attributes, click and import the users.
Optionally, you can provide the name of the OU where the new accounts will be born. Download your FREE bulk import tool.
If you need more comprehensive software, download a free trial of SAM (Server & Application Monitor)
Example 2 of Script for error 80072032
The LDAP path should be CN=Doctors, not plain Doctors
So you need to add "CN=" & to this line:
Set objNewGroup = objOU.Create("Group", strNewGroup)
Set objNewGroup = objOU.Create("Group", "cn=" & strNewGroup)
Note: Once again error 80072032 reports a dn (Distinguished name) error, where as the code just needs a cn (common name). The answer is that the one element of the dn is incorrect (CN=Doctors), however the whole dn LDAP path gets charged with error 80072032.
Error 80072032 – The server is unwilling to process the request
This error occurred on a line where I was attempting to add a user to a group in a different domain within the same forest. I had forgot to change that group’s type to ‘domain local’ and received this error message (it was previously a global group, which does not allow members for remote domains).
Kindly sent in by Paula.
Windows Management Instrumentation (WMI) is one of the hidden treasures of Microsoft operating systems. Fortunately, SolarWinds have created the WMI Monitor so that you can examine these gems of performance information for free. Take the guess work out of which WMI counters to use for applications like Microsoft Active Directory, SQL or Exchange Server.
Do you need additional help?
Give something back?
Would you like to help others? If you have a good example of this error, then please email me, I will publish it with a credit to you:
If you like this page then please share it with your friends