Windows error 8320 (ERROR_DS_CANT_ADD_ATT

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The specified attribute is absent or has no values that can be changed by the requested operation.

Previous	Next
ERROR_DS_ATT_ALREADY_EXISTS	ERROR_DS_SINGLE_VALUE_CONSTRAINT

ERROR_DS_CANT_ADD_ATT_VALUES

ERROR_DS_CANT_ADD_ATT_VALUES (8320) is an Active Directory Domain Services error. The directory operation tried to add or alter values for an attribute in a state that does not support the requested change. This is commonly an operation-semantics problem: add, replace, clear, and remove are not interchangeable for single-valued or multi-valued attributes.

What to check

Read the current values from the authoritative domain controller before choosing the operation.
Confirm whether the attribute is single-valued, multi-valued, writable, and allowed for the object class.
Use Replace for a full new value set and Add only when adding a value to an existing multivalued attribute is intended.

Useful command

Get-ADObject -Identity "<ObjectDN>" -Properties "<attributeName>"

Microsoft: Set-ADObject · Microsoft: Characteristics of AD attributes · Microsoft: Directory Service system error codes

Looking for a different code? Search another status or error code.