# Error Creating Account in AD **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** accounts, account-activities, sailpoint-identity-security\ **Created:** [August 13, 2024, 6:56pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654 "2024-08-13T18:56:44Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![kaiolima](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kaiolima/32/7226_2.png) [@kaiolima](https://developer.sailpoint.com/discuss/u/kaiolima)\ **Post date:** [August 13, 2024, 6:56pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/1 "2024-08-13T18:56:44Z")
There is a process here in the environment where the intern became an employee. And his employee identity gave an error when creating an account in AD, after manual action the creation occurred normally. I would like to know what type of error this could be? ![22](https://global.discourse-cdn.com/sailpoint/original/2X/4/42bbd7f5c43be5b449e1f542e7265ec43b11fd72.jpeg) ![23](https://global.discourse-cdn.com/sailpoint/original/2X/1/1d890040619890bf2112f4af937941b8777e060e.jpeg) ---
**Author:** ![shekhardas1825](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shekhardas1825/32/20889_2.png) [@shekhardas1825](https://developer.sailpoint.com/discuss/u/shekhardas1825)\ **Post date:** [August 13, 2024, 7:45pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/2 "2024-08-13T19:45:18Z")
@kaiolima did you created AD account manually directly in AD or from sailpoint? You are getting this error because you have enabled rollback account creation in your AD source configuration where you attach native rules. Basically you will get this error when there something wrong with the native rule like before create or after create. You can check the IQservice log or native rule logs. Hope this will help. Regards, Shekhar Das ---
**Author:** ![kaiolima](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kaiolima/32/7226_2.png) [@kaiolima](https://developer.sailpoint.com/discuss/u/kaiolima)\ **Post date:** [August 13, 2024, 7:52pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/3 "2024-08-13T19:52:44Z")
How could I check the native rules logs? ---
**Author:** ![kaiolima](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kaiolima/32/7226_2.png) [@kaiolima](https://developer.sailpoint.com/discuss/u/kaiolima)\ **Post date:** [August 13, 2024, 7:55pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/4 "2024-08-13T19:55:11Z")
The creation was carried out in AD ---
**Author:** ![shekhardas1825](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shekhardas1825/32/20889_2.png) [@shekhardas1825](https://developer.sailpoint.com/discuss/u/shekhardas1825)\ **Post date:** [August 13, 2024, 8:04pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/5 "2024-08-13T20:04:01Z")
Yes from sailpoint you won’t be able to create it until you remove the rollback flag from the AD configuration. You will also observe that if you uncheck the rollback flag it will create the AD account partially. Can you confirm if you have any rules attached? Native rules are powershell scripts deployed on your tenant you can see code and check the log path. Usually you will see the logs in IQService host. Regards, Shekhar Das ---
**Author:** ![kaiolima](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kaiolima/32/7226_2.png) [@kaiolima](https://developer.sailpoint.com/discuss/u/kaiolima)\ **Post date:** [August 13, 2024, 8:08pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/6 "2024-08-13T20:08:03Z")
There is a rule for this case, I’m checking here, because this only happened for this identity. ![2](https://global.discourse-cdn.com/sailpoint/original/2X/2/2ae5bed6a9ec74ece11d4e8662402def10d6820c.png) ---
**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\ **Post date:** [August 13, 2024, 11:35pm UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/7 "2024-08-13T23:35:50Z")
Check if all the account attributes included in the Create Account Profile are available in Active Directory ---
**Author:** ![shekhardas1825](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shekhardas1825/32/20889_2.png) [@shekhardas1825](https://developer.sailpoint.com/discuss/u/shekhardas1825)\ **Post date:** [August 14, 2024, 5:39am UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/8 "2024-08-14T05:39:58Z")
@kaiolima Please navigate to edit config → Addition Settings → Provisioning Settings to find out the rules attached. ![image](https://global.discourse-cdn.com/sailpoint/original/2X/2/28946c20807dfb7c8744481189d9b7c8a81def83.png) Check IQservice logs for the reason why the account is getting created partially, which attributes are failed to update. Check provisioning plan if all the values that are being passed are correct and in expected format. Regards, Shekhar Das ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [October 13, 2024, 5:40am UTC](https://developer.sailpoint.com/discuss/t/error-creating-account-in-ad/76654/9 "2024-10-13T05:40:20Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.