# Active Directory - New Account Creation Error : The object already exists **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** connectors, provisioning, identity-security-cloud\ **Created:** [March 18, 2025, 5:22pm UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725 "2025-03-18T17:22:39Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Augjm](https://avatars.discourse-cdn.com/v4/letter/a/41988e/32.png) [@Augjm](https://developer.sailpoint.com/discuss/u/Augjm)\ **Post date:** [March 18, 2025, 5:22pm UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/1 "2025-03-18T17:22:39Z")
Hi, We’re encountering the following error when creating new AD accounts: > Exception occurred while executing the RPCRequest: Errors returned from IQService. “The object already exists. 00002071: UpdErr: DSID-030503D3, problem 6005 (ENTRY\_EXISTS), data 0 . HRESULT:[0x80071392] For identity: CN=xyz,ou=xyz,ou=xyz,ou=xyz,ou=xyz,dc=xyz,dc=xyz,dc=com” We initially suspected the configured BPR, but the error persists even without the BPR, and when using static values for sAMAccountName, UPN, and DN in the provisioning transform for brand new users with no AD account. Any insights you can provide would be appreciated. Thanks. ---
**Author:** ![officialamitguptaa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/officialamitguptaa/32/6624_2.png) [@officialamitguptaa](https://developer.sailpoint.com/discuss/u/officialamitguptaa)\ **Post date:** [March 18, 2025, 5:34pm UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/2 "2025-03-18T17:34:33Z")
@Augjm - Most of the time, this error boils down to a uniqueness conflict in Active Directory. Make sure: - The **sAMAccountName** is truly unique. - The **UPN** is truly unique. - The **DN** path doesn’t collide with any existing object. Once you rule out all those collisions, you should be able to provision new AD accounts without that “object already exists” error. To get some more insight kindly share the transform details related to the above attributes. ---
**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\ **Post date:** [March 18, 2025, 9:45pm UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/3 "2025-03-18T21:45:48Z")
How is the AD account created, Request Access or Automated using some Role ? Are you seeing this error when AD account attempted to create or a subsequent refresh ? ---
**Author:** ![Augjm](https://avatars.discourse-cdn.com/v4/letter/a/41988e/32.png) [@Augjm](https://developer.sailpoint.com/discuss/u/Augjm)\ **Post date:** [March 19, 2025, 6:26am UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/4 "2025-03-19T06:26:17Z")
It’s through entitlement request. This error occurs during the initial creation account, then all subsequent refreshes. I know for a fact that there’s no collision on any of the attribute, as I tested by setting static values in the create account schema ---
**Author:** ![hkhandale](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/hkhandale/32/23833_2.png) [@hkhandale](https://developer.sailpoint.com/discuss/u/hkhandale)\ **Post date:** [March 19, 2025, 8:00am UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/5 "2025-03-19T08:00:48Z")
This error typically occurs during data aggregation when a user matches a **Role assignment** , and the duplicate user first and last name present in identities. However, if you provision users individually through **Role-based assignment** , **IdentityNow should generate a unique value** for them. To resolve this, you can try using an **After Provisioning Rule** to generate a **unique UPN** if your **Account ID and Account Name are set as DN and sAMAccountName**. Additionally, set **UPN as “Disable”** in the **provisioning plan** to let the rule handle uniqueness. This should work for your use case. If you still face issues, please provide more details, and we’d be happy to assist further! Thanks! ---
**Author:** ![j\_place](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/j_place/32/19181_2.png) [@j\_place](https://developer.sailpoint.com/discuss/u/j_place)\ **Post date:** [March 19, 2025, 1:19pm UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/6 "2025-03-19T13:19:15Z")
Hi @Augjm Just something to check - I note your DN has CN= in capitals but ou= in lower case. I appreciate this may have just been a typo, but maybe check your case sensitivity? ---
**Author:** ![TheOneAMSheriff](https://avatars.discourse-cdn.com/v4/letter/t/ee59a6/32.png) [@TheOneAMSheriff](https://developer.sailpoint.com/discuss/u/TheOneAMSheriff)\ **Post date:** [March 19, 2025, 5:08pm UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/7 "2025-03-19T17:08:59Z")
Hi @Augjm, See in target application/Active Directory if the account you wanted ISC/IQService to create existing/existing partially. If yes, its possible ISC/IQService tried to create the account twice. First attempt the account was created but the provisioningResult was not received in time - increase “provisioningTimeout” in source to resolve this: - ```auto { "op": "replace", "path": "/connectorAttributes/provisioningTimeout", "value": 300 } ``` Second attempt you got the reported error: Exception occurred while executing the RPCRequest: Errors returned from IQService. “The object already exists ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [May 18, 2025, 5:09pm UTC](https://developer.sailpoint.com/discuss/t/active-directory-new-account-creation-error-the-object-already-exists/104725/8 "2025-05-18T17:09:11Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.