Issue description

We are aware of an intermittent issue with user mailbox creations. If the following error is found in the Portal audit, the account creation was not fully successful:

“Active Directory operation failed on nh-azscdc02.ad1.nhs.net. This error is not retriable. Additional information: Access is denied.\r\nActive directory response: 00000005: SecErr: DSID-03152D06, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0\n”

Whilst the audit states the account creation failed, if admins attempt to recreate using the same email address, they will receive a similar error stating the object already exists:

“An exception has occurred. Failed to create user email.address@nhs.net<mailto:email.address@nhs.net> Active Directory operation failed on server. The object ‘x’ already exists.”

Although the error states that the account already exists, when searching the user in Portal, they will not be found. This is because the account has been partially created and does not exist within the Portal DB.

Latest updates and guidance:

This is being investigated under problem record PRB0224297.

We request admins to raise a Service Request with the Helpdesk (helpdesk@nhs.net), referencing the problem record and affected users. The Portal team will manually complete the account creation so that it is visible in Portal.