[MS-DFSRH]: DFS Replication Helper Protocol Specification

If parameter validation fails, the server MUST fail the operation immediately and return anappropriate error as its response to the client.If both the security check and the parameter validation succeed, the server MUST create a newLDAP command for modifying an existing Active Directory object with the specified distinguishedname and attributes.The server MUST execute this LDAP command against the domain controller that is specified indomainControllerName and check the return value of the LDAP protocol.If the LDAP protocol returns LDAP_SUCCESS, the server MUST return zero to the caller to indicatethe success of the call; otherwise, if the LDAP protocol returns any return code other thanLDAP_SUCCESS, the server MUST return the following error code to the caller:• If the error is LDAP_OPERATIONS_ERROR, the server gets the server-side error code of the LDAPoperation and MUST return dfsrHelperLdapErrorBase + the server-side error code to the caller.• For all other LDAP errors, the server MUST return dfsrHelperLdapErrorBase + the LDAP returncode to the caller.3.1.5.3 IADProxy2 InterfaceThe IADProxy2 interface, as specified in MS-DCOM, inherits from the IADProxy interface, which inturn inherits from the IUnknown interface. Method opnum field values start with 6. Opnum values 0through 2 represent the IUnknown::QueryInterface, AddRef, and Release methods, respectively.Opnums 3 through 5 are inherited from IADProxy.To receive incoming remote calls for this interface, the server MUST implement a DCOM object usingthe UUID {C4B0C7D9-ABE0-4733-A1E1-9FDEDF260C7A}.In these methods, the DFS-R Helper Protocol calls several Windows APIs and returns the error codesthat are returned by these APIs. These are referred to as nonzero implementation-specific errorcodes in the following sections.Methods in RPC Opnum OrderMethodCreateObjectDeleteObjectModifyObjectDescriptionCreate an Active Directory object with the specified distinguished name and attributes.Opnum: 6Delete an Active Directory object with the specified distinguished name and attributes.Opnum: 7Add, delete, or modify attributes of the specified Active Directory object.Opnum: 83.1.5.3.1 CreateObject Method (Opnum 6)The CreateObject method MUST execute an LDAP command under machine security credentials, orfor a cluster, under the specified network name credentials in order to create an Active Directoryobject that has a specific distinguished name and attributes.HRESULT CreateObject([in] BSTR domainControllerName,[MS-DFSRH] – v20080207DFS Replication Helper Protocol SpecificationCopyright © 2008 Microsoft Corporation.Release: Thursday, February 7, 200857 / 81