| Previous | Next |
| ERROR_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER | ERROR_DS_NO_OBJECT_MOVE_IN_SCHEMA_NC |
ERROR_DS_MODIFYDN_DISALLOWED_BY_INSTANCE_TYPE
instanceType can make ModifyDN illegal even for a valid DN
LDAP ModifyDN describes renaming and reparenting entries, but Active Directory applies additional structural rules. NC heads define replicated partition roots, and read-only object instances do not accept ordinary originating updates. Their instanceType state therefore prevents a normal rename or move from rewriting the directory topology.
This is more specific than a schema naming violation. The proposed RDN can satisfy attribute syntax and the new parent can be a legal superior, yet the operation remains forbidden because of the object’s replication role. Inspect the object state before changing names or permissions.
What to inspect
- Determine whether the target is an NC head, subordinate reference, or object exposed through a read-only replica.
- For an NC head, use partition/domain lifecycle operations rather than LDAP ModifyDN.
- For a read-only view, direct the originating update to an appropriate writable replica; do not attempt to clear system-maintained instance flags.
References
Looking for a different code? Search another status or error code.