| Previous | Next |
| ERROR_DS_INCOMPATIBLE_VERSION | ERROR_DS_NO_BEHAVIOR_VERSION_IN_MIXEDDOMAIN |
ERROR_DS_LOW_DSA_VERSION
A functional-level raise is blocked by lower-capability DSA objects
MS-ADTS specifies an explicit check when a domain or forest functional level is raised. The directory searches the configuration naming context for DSA objects whose msDS-Behavior-Version is below the requested value. If such a DC hosts the relevant domain or exists in the forest scope, the update is rejected with this status.
Enumerate every DC, including read-only DCs and stale server metadata, and compare its advertised behavior version with the requested level. A decommissioned server object can be just as important as a live old DC if its metadata still remains. Upgrade or remove incompatible DCs, perform metadata cleanup for permanently removed servers, and wait for configuration replication before retrying the raise.
What to inspect
- Search DSA objects for msDS-Behavior-Version below the target level.
- Include RODCs and stale NTDS Settings objects in the inventory.
- Verify configuration NC replication before retrying the behavior-version update.
References
- MS-ADTS: behavior-version updates
- MS-ADTS: DC functional level
- Microsoft: clean up domain controller metadata
Looking for a different code? Search another status or error code.