| Previous | Next |
| ERROR_DS_OUT_OF_VERSION_STORE | ERROR_DS_NO_REF_DOMAIN |
ERROR_DS_INCOMPATIBLE_CONTROLS_USED
Individually supported controls can still be mutually incompatible
ERROR_DS_INCOMPATIBLE_CONTROLS_USED occurs when an LDAP operation attaches a combination of controls whose semantics conflict. Controls can redefine search scope, expose deleted or recycled objects, request sorting or virtual-list views, perform directory synchronization, change name representation, or alter update behavior. Support for each OID in rootDSE does not guarantee that every combination is valid.
Capture the ordered list of control OIDs, each criticality flag, and its decoded value. Reproduce the request by removing controls one at a time, then consult the Active Directory specification for restrictions on the conflicting pair. Do not merely mark a critical control noncritical: that can make the request succeed while silently omitting behavior on which the application depends. Build operations around one coherent server-side query model and perform separate searches when two controls imply incompatible scope or result-state rules.
Control-set evidence
- Every control OID and criticality flag.
- BER-decoded control values.
- LDAP operation and search scope.
- Smallest pair that reproduces the conflict.
References
- Microsoft: LDAP extended controls and server support
- Microsoft: LDAPControl OID, value, and criticality
- IETF RFC 4511: processing critical and noncritical controls
Looking for a different code? Search another status or error code.