| Previous | Next |
| STATUS_DS_OBJ_CLASS_VIOLATION | STATUS_DS_CANT_ON_RDN |
STATUS_DS_CANT_ON_NON_LEAF
The object is not a leaf in the directory tree
Directory entries are arranged in a hierarchy of distinguished names. Some operations, especially delete and certain rename/move forms, are only valid when the target has no subordinate objects.
The status tells you to inspect the namespace, not the attribute syntax. Removing or moving children may require a different administrative plan, because child objects can include computers, users, service connection points, or application-specific containers.
What to inspect
- Search one level below the target DN for child objects.
- Check whether tombstoned, recycled or hidden objects are relevant to the operation.
- Avoid deleting a container recursively unless the caller explicitly owns all subordinate objects.
References
- LDAP DN string form: RFC 4514
- Microsoft: Distinguished Names
- LDAP protocol operations: RFC 4511
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.