What does Windows error code 8215 (ERROR_DS_CANT_MOD_OBJ_CLASS) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The directory service rejected an attempt to change an existing object class.

Previous	Next
ERROR_DS_CANT_ON_RDN	ERROR_DS_CROSS_DOM_MOVE_ERROR

ERROR_DS_CANT_MOD_OBJ_CLASS

ERROR_DS_CANT_MOD_OBJ_CLASS (8215) is an Active Directory Domain Services error. The request attempted to alter the objectClass of an existing directory object. Object class defines schema-governed identity, mandatory attributes, and permitted attributes, so it is not a safe mutable property of an existing object.

What to check

Read the current objectClass and determine whether the wrong class was created originally.
Create a correctly typed object and migrate supported attributes if the design is wrong.
Do not edit schema or system attributes merely to force an existing object into another class.

Useful command

Get-ADObject -Identity "<ObjectDN>" -Properties objectClass | Select-Object -ExpandProperty objectClass

Microsoft: Characteristics of AD attributes · Microsoft: Impact of schema changes · Microsoft: Directory Service system error codes

Looking for a different code? Search another status or error code.