Get constraintViolation for dNSHostName when creating a machine account with Certipy 4.0

[rick-engle]

Oliver, you addressed a similar issue in #53. Do you happen to know which patch (i.e. KB article) includes the patch that that prevents a machine account from being created with the same DNS host name as the domain controller? I'd like to try and uninstall that patch and retry. I am testing against Windows Server 2012 R2. certipy account create -username "[email protected]" -password "abc123ABC" -user FAKECOMP -dns DC1.domain.com Certipy v4.0.0 - by Oliver Lyak (ly4k)

[*] Creating new account: sAMAccountName : FAKECOMP$ [-] Received unknown error: (constraintViolation) 0000200B: AtrErr: DSID-033E113B, #1: 0: 0000200B: DSID-033E113B, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 9026b (dNSHostName)

Also, I notice that with Certipy 4.0 I can successfully create a computer account if I use the credentials from a domain administrator but not if I use a standard user account credentials. How is that possible if that patch is installed for an administrator's credentials to succeed?

Thank you