Windows error 8340 (ERROR_DS_CANT_DELETE_DSA

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: A Directory System Agent object cannot be deleted directly.

Previous	Next
ERROR_DS_OBJECT_BEING_REMOVED	ERROR_DS_GENERIC_ERROR

ERROR_DS_CANT_DELETE_DSA_OBJ

ERROR_DS_CANT_DELETE_DSA_OBJ (8340) is an Active Directory Domain Services error. The request attempted to delete a DSA-related object directly. Domain controller server and NTDS Settings objects are part of Active Directory topology and should be removed through supported domain-controller demotion or metadata cleanup procedures.

What to check

Determine whether the domain controller is still online and can be demoted normally.
Use metadata cleanup only for a DC that cannot be recovered or was removed without normal demotion.
Verify replication after any topology change before reusing a server name or promoting a replacement DC.

Useful command

repadmin /showrepl * /csv

Microsoft: Demote domain controllers and domains · Microsoft: Clean up AD DS server metadata · Microsoft: Diagnose AD replication failures

Looking for a different code? Search another status or error code.