| Previous | Next |
| ERROR_DS_BAD_INSTANCE_TYPE | ERROR_DS_OBJECT_CLASS_REQUIRED |
ERROR_DS_MASTERDSA_REQUIRED
The server you contacted is not the required master DSA
A directory service agent (DSA) maintains directory information, but not every DSA can originate every Active Directory update. Some partition and single-master operations have to execute on a specific authoritative server. The contacted DC can be healthy, reachable, and able to answer LDAP searches while still being the wrong execution point for this request.
Treat this differently from a replication transport failure. The operation is being rejected because of server role and authority, not because RPC or LDAP cannot reach the DC. AD clients that understand referrals or role ownership should locate the appropriate master rather than repeatedly issuing the same write to another arbitrary replica.
What to inspect
- Determine the object or NC being modified and which master role or internal DSA responsibility governs that update.
- Verify current role ownership and successful replication of the relevant NC before forcing a role transfer or seizure.
- Log the DC selected by the client. Load-balanced or site-local server selection can hide that the write is consistently sent to a non-master DSA.
References
Looking for a different code? Search another status or error code.