What does Windows error code 643 (ERROR_DS_VERSION_CHECK_FAILURE) mean?

 
Previous Next
ERROR_PORT_NOT_SET ERROR_RANGE_NOT_FOUND

ERROR_DS_VERSION_CHECK_FAILURE

The server version cannot participate at the directory behavior level it encountered

Active Directory represents supported directory behavior with functional-level metadata. MS-ADTS records a DC capability in msDS-Behavior-Version, and a DC can support domain or forest behavior only up to the level that its implementation advertises. This status therefore belongs to compatibility validation, not to ordinary LDAP data validation.

Check all three layers separately: the operating system and DC capability of the server, the domain functional level, and the forest functional level. A value copied or edited directly with ADSI Edit is not a substitute for a supported functional-level transition. During promotion or component upgrade, use the deployment prerequisite output to identify which behavior version was read and which server is incompatible.

What to inspect

  • Read the current forest and domain modes with the AD PowerShell module.
  • Compare the candidate DC version with msDS-Behavior-Version on existing DSA objects.
  • Review deployment logs before changing any behavior-version attribute manually.

References


Looking for a different code? Search another status or error code.