Symptoms

Example

Task ID     46464797
Queue name  domain_service322585
Task name   Attach all users to SharePoint site (domain sharepoint.site.com #100022, homedir #174986) on host sharepoint01.domain.net (#617)
Task description    Attach all users to SharePoint site (domain sharepoint.site.com #100022, homedir #174986) on host sharepoint01.domain.net (#617)
Queue status        Failed
Start not earlier than  Apr-23-2014 01:25
Method name     taskAddSPSUsers on OBJREF:iis:0:getDomainService:322585
Last execution output   Destination host 'sharepoint01.domain.net' (#617), IP '10.2.69.13' : Provisioning request failed. Unknown error 0x810200CE [<response><errorContext description="Access denied.
You do not have permission to perform this action or access this resource." code="0x810200ce" executeSeqNo="3"><errorSource namespace="Error Provider" procedure="SetError"/><errorSource namespace="Error Provider Ex" procedure="RethrowError"/></errorContext></response>]

Cause

Might be incorrect "UserAccountDirectoryPath" for the site in SharePoint Content Database.

Resolution

Login to SharePoint host and check "UserAccountDirectoryPath" for the issued SharePoint site:

PS C:\Users\pem_admin> Get-SPSite http://sharepoint.site.com | fl Url, Owner, UserAccountDirectoryPath
Url                      : http://sharepoint.site.com
Owner                    : DOMAIN\wss-admin07228
UserAccountDirectoryPath : OU=S001009391,OU=R0001002957,OU=Hosting,DC=domain,DC=net

Another way to check:

C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN>stsadm -o getsiteuseraccountdirectorypath -url http://sharepoint.site.com
<SiteUserAccountDirectoryPath>OU=S001009391,OU=R0001002957,OU=Hosting,DC=domain,DC=net</SiteUserAccountDirectoryPath>

Login to preffered Active Directory domain controller, open ADSIEdit.msc and verfity this path. Make sure it refferes to correct subscription.

If the path is wrong, it can be updated in the following way:

C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN>stsadm -o setsiteuseraccountdirectorypath -url http://sharepoint.site.com -path "OU=S001064178,OU=Provider,OU=Hosting,DC=domain,DC=net"
Operation completed successfully.

Re-run the task.

Internal content

Link on internal Article