| Previous | Next |
| ERROR_DS_REPL_LIFETIME_EXCEEDED | ERROR_DS_LDAP_SEND_QUEUE_FULL |
ERROR_DS_DISALLOWED_IN_SYSTEM_CONTAINER
The requested operation is not allowed on an object under the system container.
ERROR_DS_DISALLOWED_IN_SYSTEM_CONTAINER is Win32 error 8615 (0x000021A7).
Likely impact: Direct edits can disrupt replication, policy, trust, or product metadata even when the caller is highly privileged.
Typical causes
- a generic cleanup tool targets system-owned objects.
- the object is managed by another directory feature.
- the caller tries to move or repurpose protected metadata.
- the target DN was computed incorrectly.
Troubleshooting steps
- Verify that the requested operation is permitted for that system-owned object and is performed through its owning feature.
- Collect full target DN and object class and owning feature.
Useful evidence
- Collect requested LDAP modification.
- Collect supported management tool for the object.
Recovery and retry
Leave the system-owned object under feature control or use the owning management interface; exclude it from generic directory cleanup.
Related errors
ERROR_DS_MODIFYDN_DISALLOWED_BY_FLAG is object-flag based; this code is specifically tied to placement under the System container
Example
An OU cleanup script descends into CN=System and attempts to rename feature metadata. Restricting its search base to managed business OUs removes the unsafe request.
References
Looking for a different code? Search another status or error code.