| Previous | Next |
| ERROR_DS_ROOT_MUST_BE_NC | ERROR_DS_ATT_NOT_DEF_IN_SCHEMA |
ERROR_DS_ADD_REPLICA_INHIBITED
Replica creation depends on a writable naming context
Active Directory replicates each naming context independently. Full NC replicas accept originating updates, while partial or filtered replicas are not writable. Adding replica state is a topology and partition operation, so it cannot be originated through a replica that only exposes a read-only view of the NC.
The useful diagnostic question is which DC and which NC the operation selected. A global catalog can hold partial replicas of other domain NCs, and a read-only domain controller has additional write restrictions. Seeing the object through LDAP does not prove that the contacted server can originate the requested replica change.
What to inspect
- Record the exact naming-context DN and the DC that returned the error; do not troubleshoot only by domain name.
- Verify whether that DC holds a full writable replica of the NC and whether the operation is being referred to an appropriate writable DC.
- Check replication health before retrying topology changes, because stale partition metadata can make a valid target appear unsuitable.
References
Looking for a different code? Search another status or error code.