| Previous | Next |
| STATUS_DS_CANT_ON_NON_LEAF | STATUS_DS_CANT_MOD_OBJ_CLASS |
STATUS_DS_CANT_ON_RDN
The RDN attribute cannot be changed as an ordinary attribute
The RDN is the naming component of an object relative to its parent. Active Directory treats it as part of the object name, so changing the naming attribute is a rename operation, not a normal attribute modify.
For example, changing cn, ou, or another naming attribute through a generic attribute write can fail even when the caller has permission to update other fields.
What to inspect
- Determine which attribute forms the object RDN from its DN.
- Use the appropriate rename or modifyDN operation instead of a plain modify.
- Check name uniqueness under the parent container before retrying the rename.
References
- Microsoft MS-ADTS: objectClass, RDN, DN
- Microsoft: Distinguished Names
- LDAP DN string form: RFC 4514
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.