| Previous | Next |
| STATUS_DS_RIDMGR_INIT_ERROR | STATUS_DS_CANT_ON_NON_LEAF |
STATUS_DS_OBJ_CLASS_VIOLATION
The objectClass rules were not satisfied
Object class validation controls which mandatory and optional attributes may exist on an entry. This status means the request failed those schema rules, such as omitting a required attribute or trying to attach an attribute not allowed by the structural and auxiliary classes.
Do not reduce it to a generic permission failure. The directory accepted the caller far enough to validate the proposed object shape and then rejected that shape as incompatible with the schema.
What to inspect
- List the structural object class, auxiliary classes and the requested attribute changes.
- Check
mustContain,mayContainand inherited class constraints. - If a synchronization tool generated the request, inspect the mapping rule that selected the object class.
References
- Microsoft MS-ADTS: enforce schema constraints
- Microsoft MS-ADTS: constraints
- LDAP schema model: RFC 4512
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.