What does Windows error code 8204 (ERROR_DS_ATTRIBUTE_TYPE_UNDEFINED) mean?

 
Previous Next
ERROR_DS_INVALID_ATTRIBUTE_SYNTAX ERROR_DS_ATTRIBUTE_OR_VALUE_EXISTS

ERROR_DS_ATTRIBUTE_TYPE_UNDEFINED

ERROR_DS_ATTRIBUTE_TYPE_UNDEFINED (0x0000200C) is an Active Directory Domain Services LDAP result. The client referenced an attribute that is not defined in the schema visible to the directory service.

Check the attribute name or OID against the schema visible on the contacted domain controller. Schema replication lag, a typo, or use of an extension not installed in this forest can all produce the same client-facing result.

What to check

  • Confirm the LDAP attribute name, including any application-specific schema extension.
  • Verify that schema changes replicated to the domain controller handling the request.
  • Make sure the client is querying the intended directory partition and not a different forest or AD LDS instance.

Useful command

Get-ADRootDSE -Server "<dc-fqdn>"

Microsoft: AD DS LDAP operations · Microsoft: AD DS diagnostic logging · Microsoft: Get-ADObject


Looking for a different code? Search another status or error code.