🚀 go-pugleaf

I am writing a web service DLL that uses ADSI to create user accounts within
a domain. The DLL is always executed under a server specified account that
has Account Operator privileges. My code follows the methodology described
in the MSDN knowledge base:


      ADsGetObject(WideString("LDAP..."), IID_IADsContainer, (void
**)&iadVarContainer);
      iadVarContainer->Create(WideString("user"), WideString("CN=" +
strAccountName), &idspUser);
      idspUser->QueryInterface(IID_IADsUser, (void **)&iadUser);


      iadUser->Put(WideString("sAMAccountName"), Variant(strAccountName));
      iadUser->Put(WideString("userPrincipalName"), Variant(strAccountName +
"@" + strServerDomain));


      iadUser->SetInfo();


The SetInfo() method keeps returning a value of 0x8007202F
(LDAP_CONSTRAINT_VIOLATION).

I have confirmed that this is not a permissions problem because I have other
routines that use ADSI to edit and delete existing user accounts and these
routines work perfectly.

Could anyone tell me what why I would be able to edit and delete accounts,
but not create them? What am I missing?

Dan