Does anyone have an example of this? M y container name is Sharepoint, Domain is Twist.Local So this is how I have it in the created box. OU=SharePoint, DC=Twister.local, DC=Com Central admin appl account is the delegated control of the OU. Giving me the error <input id="ctl00_PlaceHolderMain_DirManSection_ctl01_TxtADContainerObject" class="ms-input" title="Active Directory container where new distribution groups and contacts will be created:" maxlength="256" name="ctl00$PlaceHolderMain$DirManSection$ctl01$TxtADContainerObject" size="35" type="text" value="OU=SharePoint, DC=Twister.local, DC=Com" /> Either the specified Active Directory container does not exist or it has not granted the correct permissions to the central administration application pool account. Either the specified Active Directory container does not exist or it has not granted the correct permissions to the central administration application pool account

Lionfis, Check if your farm account (Central Admin app pool account) running as the app pool for your content web app. It shouldn't be, so you should fix that. If it's NOT, then you've given the wrong account access to the OU. If it currently is, then if you want to test before fixing, then raise that account's access in the OU to full control and see if it works. Write permissions aren't always enough, I've found. Refer following links for more detail on suggested solution and other possible solutions: http://social.technet.microsoft.com/Forums/en/sharepointgeneral/thread/cb00b84f-35b1-4066-a8b4-dc4b5d253b44 http://social.technet.microsoft.com/Forums/en/sharepointadmin/thread/95e49f64-d35f-4b4d-bc18-2c74a227d698Leonid Lyublinski Wizard of MOSS

OK so the accounts have full control and getting the same error. Under IIS the central Admin identity is network service, I can't seem to be able to change this. Any help?