[MS-DFSRH]: DFS Replication Helper Protocol Specification

3.1.5.3.2 DeleteObject Method (Opnum 7)The DeleteObject method executes an LDAP command to delete an Active Directory object with aspecified distinguished name and attributes. The command MUST be executed under the machinesecurity credentials, or for a cluster, under the specified network name credentials.HRESULT DeleteObject([in] BSTR domainControllerName,[in] BSTR distinguishedName,[in] BSTR networkNameResourceName);domainControllerName: MUST be the FQDN of the domain controller to which the methodsends the LDAP request.distinguishedName: MUST be the distinguished name of the Active Directory object that isbeing deleted. The distinguished name of any object in Active Directory MAY be used. Theformat of the distinguished name is specified in [RFC2251] section 4.1.3.networkNameResourceName: MUST be the name of the cluster resource (the resource typeMUST be "Network Name"). If this parameter is a non-empty string, the server MUST executethe LDAP command under the account that corresponds to this network name. There are noconstraints regarding the format of the network name except the requirement that its lengthbe no more than 32,767 characters. Otherwise, if this parameter is NULL or an empty string,the server MUST use the machine account to execute the LDAP command.Return Values: The method MUST return:• 0 on success.• For LDAP protocol failures:• If the LDAP error is LDAP_OPERATIONS_ERROR, dfsrHelperLdapErrorBase + the serversideerror code.• For all other LDAP errors, dfsrHelperLdapErrorBase + the LDAP return code. For moreinformation, see [LDAP-ERR].• For all other failures, an implementation-specific nonzero error code.The server MUST handle this message by using the same sequence of steps as forIADProxy::DeleteObject (as specified in section 3.1.5.2.2), with the following additional step:• The server MUST execute the LDAP command under the credentials that correspond to thenetwork resource name that is supplied in the networkNameResourceName parameter.3.1.5.3.3 ModifyObject Method (Opnum 8)The ModifyObject method executes an LDAP command to add, delete, or modify attributes of aspecified Active Directory object. The command MUST be executed under machine securitycredentials, or for a cluster, under the specified network name credentials in order to create anActive Directory object with a specific distinguished name and attributes.HRESULT ModifyObject([in] BSTR domainControllerName,[MS-DFSRH] – v20080207DFS Replication Helper Protocol SpecificationCopyright © 2008 Microsoft Corporation.Release: Thursday, February 7, 200859 / 81