Things to look at: sAMAccountName is unique and no more than 20 characters, manager value is an existing DN, countryCode is a supported value, mailNickname is unique, userPrincipalName is unique. Not an exhaustive list, just some things that can cause constraint violations