| Previous | Next |
| ERROR_DS_CANT_MOD_SYSTEM_ONLY | ERROR_DS_OBJ_CLASS_NOT_DEFINED |
ERROR_DS_REPLICATOR_ONLY
Some directory updates are replication-only
Active Directory distinguishes originating updates from replicated updates. An originating update is created on one writable replica; the replication system later applies the stamped change to other NC replicas while preserving replication metadata. Operations reserved for the replicator cannot be invoked as ordinary administrative writes.
This boundary protects convergence rules such as originating server identity, update sequence numbers, versions, and replication stamps. A generic LDAP modify that happens to reproduce the visible attribute value is not equivalent to a replicated update. Software that replays directory data must use supported restore, migration, or replication interfaces rather than impersonating the replication engine.
What to inspect
- Identify whether the caller is issuing LDAP/ADSI writes, using a replication API, or replaying exported directory state.
- Do not “fix” the error by forcing system-maintained replication metadata attributes through low-level writes.
- For divergence between DCs, inspect object metadata and replication partners to find the missing originating update.
References
Looking for a different code? Search another status or error code.