Whenever our Windows PC encounters a problem, it returns an error code. The error code may seem to be an alien language to you, but these error codes provide directions to the programmers, so that they can understand the underlying problem and write better programs. And why does a normal end user need to know the different error codes? The answer is they can contact the care of Microsoft and report them the error code, so that the support can guide them better.
There are various types of error codes. One of them is the system error codes. The range of system codes is huge. It can occur to any application or system programs at any location. The descriptions of these codes are not specifically mentioned and thus a programmer needs to investigate and analyze the situation before debugging. System error codes are defined in WinError.h.
An error occurred while installing the directory service. For more information, see the event log.
The directory service evaluated group memberships locally.
The specified directory service attribute or value does not exist.
The attribute syntax specified to the directory service is invalid.
The attribute type specified to the directory service is not defined.
The specified directory service attribute or value already exists.
The directory service is busy.
The directory service is unavailable.
The directory service was unable to allocate a relative identifier.
The directory service has exhausted the pool of relative identifiers.
The requested operation could not be performed because the directory service is not the master for that type of operation.
The directory service was unable to initialize the subsystem that allocates relative identifiers.
The requested operation did not satisfy one or more constraints associated with the class of the object.
The directory service can perform the requested operation only on a leaf object.
The directory service cannot perform the requested operation on the RDN attribute of an object.
The directory service detected an attempt to modify the object class of an object.
The requested cross-domain move operation could not be performed.
Unable to contact the global catalog server.
The policy object is shared and can only be modified at the root.
The policy object does not exist.
The requested policy information is only in the directory service.
A domain controller promotion is currently active.
A domain controller promotion is not currently active.
An operations error occurred.
A protocol error occurred.
The time limit for this request was exceeded.
The size limit for this request was exceeded.
The administrative limit for this request was exceeded.
The compare response was false.
The compare response was true.
The requested authentication method is not supported by the server.
A more secure authentication method is required for this server.
The authentication mechanism is unknown.
A referral was returned from the server.
The server does not support the requested critical extension.
This request requires a secure connection.
A constraint violation occurred.
There is no such object on the server.
There is an alias problem.
An invalid dn syntax has been specified.
The object is a leaf object.
There is an alias dereferencing problem.
The server is unwilling to process the request.
A loop has been detected.
There is a naming violation.
The result set is too large.
The operation affects multiple DSAs.
The server is not operational.
A local error has occurred.
An encoding error has occurred.
A decoding error has occurred.
The search filter cannot be recognized.
One or more parameters are illegal.
The specified method is not supported.
No results were returned.
The specified control is not supported by the server.
A referral loop was detected by the client.
The preset referral limit was exceeded.
The search requires a SORT control.
The search results exceed the offset range specified.
The directory service detected the subsystem that allocates relative identifiers is disabled. This can occur as a protective mechanism when the system determines a significant portion of relative identifiers (RIDs) have been exhausted. Please see https://go.microsoft.com/fwlink/p/?linkid=228610 for recommended diagnostic steps and the procedure to re-enable account creation.
The root object must be the head of a naming context. The root object cannot have an instantiated parent.
The add replica operation cannot be performed. The naming context must be writeable in order to create the replica.
A reference to an attribute that is not defined in the schema occurred.
The maximum size of an object has been exceeded.
An attempt was made to add an object to the directory with a name that is already in use.
An attempt was made to add an object of a class that does not have an RDN defined in the schema.
An attempt was made to add an object using an RDN that is not the RDN defined in the schema.
None of the requested attributes were found on the objects.
The user buffer is too small.
The attribute specified in the operation is not present on the object.
Illegal modify operation. Some aspect of the modification is not permitted.
The specified object is too large.
The specified instance type is not valid.
The operation must be performed at a master DSA.
The object class attribute must be specified.
A required attribute is missing.
An attempt was made to modify an object to include an attribute that is not legal for its class.
The specified attribute is already present on the object.
The specified attribute is not present, or has no values.
Multiple values were specified for an attribute that can have only one value.
A value for the attribute was not in the acceptable range of values.
The specified value already exists.
The attribute cannot be removed because it is not present on the object.
The attribute value cannot be removed because it is not present on the object.
The specified root object cannot be a subref.
Chaining is not permitted.
Chained evaluation is not permitted.
The operation could not be performed because the object’s parent is either uninstantiated or deleted.
Having a parent that is an alias is not permitted. Aliases are leaf objects.
The object and parent must be of the same type, either both masters or both replicas.
The operation cannot be performed because child objects exist. This operation can only be performed on a leaf object.
Directory object not found.
The aliased object is missing.
The object name has bad syntax.
It is not permitted for an alias to refer to another alias.
The alias cannot be dereferenced.
The operation is out of scope.
The operation cannot continue because the object is in the process of being removed.
The DSA object cannot be deleted.
A directory service error has occurred.
The operation can only be performed on an internal master DSA object.
The object must be of class DSA.
Insufficient access rights to perform the operation.
The object cannot be added because the parent is not on the list of possible superiors.
Access to the attribute is not permitted because the attribute is owned by the Security Accounts Manager (SAM).
The name has too many parts.
The name is too long.
The name value is too long.
The directory service encountered an error parsing a name.
The directory service cannot get the attribute type for a name.
The name does not identify an object; the name identifies a phantom.
The security descriptor is too short.
The security descriptor is invalid.
Failed to create name for deleted object.
The parent of a new subref must exist.
The object must be a naming context.
It is not permitted to add an attribute which is owned by the system.
The class of the object must be structural; you cannot instantiate an abstract class.
The schema object could not be found.
A local object with this GUID (dead or alive) already exists.
The operation cannot be performed on a back link.
The cross reference for the specified naming context could not be found.
The operation could not be performed because the directory service is shutting down.
The directory service request is invalid.
The role owner attribute could not be read.
The requested FSMO operation failed. The current FSMO holder could not be contacted.
Modification of a DN across a naming context is not permitted.
The attribute cannot be modified because it is owned by the system.
Only the replicator can perform this function.
The specified class is not defined.
The specified class is not a subclass.
The name reference is invalid.
A cross reference already exists.
It is not permitted to delete a master cross reference.
Subtree notifications are only supported on NC heads.
Notification filter is too complex.
Schema update failed: duplicate RDN.
Schema update failed: duplicate OID.
Schema update failed: duplicate MAPI identifier.
Schema update failed: duplicate schema-id GUID.
Schema update failed: duplicate LDAP display name.
Schema update failed: range-lower less than range upper.
Schema update failed: syntax mismatch.
Schema deletion failed: attribute is used in must-contain.
Schema deletion failed: attribute is used in may-contain.
Schema update failed: attribute in may-contain does not exist.
Schema update failed: attribute in must-contain does not exist.
Schema update failed: class in aux-class list does not exist or is not an auxiliary class.
Schema update failed: class in poss-superiors does not exist.
Schema update failed: class in subclassof list does not exist or does not satisfy hierarchy rules.
Schema update failed: Rdn-Att-Id has wrong syntax.
Schema deletion failed: class is used as auxiliary class.
Schema deletion failed: class is used as sub class.
Schema deletion failed: class is used as poss superior.
Schema update failed in recalculating validation cache.
The tree deletion is not finished. The request must be made again to continue deleting the tree.
The requested delete operation could not be performed.
Cannot read the governs class identifier for the schema record.
The attribute schema has bad syntax.
The attribute could not be cached.
The class could not be cached.
The attribute could not be removed from the cache.
The class could not be removed from the cache.
The distinguished name attribute could not be read.
No superior reference has been configured for the directory service. The directory service is therefore unable to issue referrals to objects outside this forest.
The instance type attribute could not be retrieved.
An internal error has occurred.
A database error has occurred.
The attribute GOVERNSID is missing.
An expected attribute is missing.
The specified naming context is missing a cross reference.
A security checking error has occurred.
The schema is not loaded.
Schema allocation failed. Please check if the machine is running low on memory.
Failed to obtain the required syntax for the attribute schema.
The global catalog verification failed. The global catalog is not available or does not support the operation. Some part of the directory is currently not available.
The replication operation failed because of a schema mismatch between the servers involved.
The DSA object could not be found.
The naming context could not be found.
The naming context could not be found in the cache.
The child object could not be retrieved.
The modification was not permitted for security reasons.
The operation cannot replace the hidden record.
The hierarchy file is invalid.
The attempt to build the hierarchy table failed.
The directory configuration parameter is missing from the registry.
The attempt to count the address book indices failed.
The allocation of the hierarchy table failed.
The directory service encountered an internal failure.
The directory service encountered an unknown failure.
A root object requires a class of ‘top’.
This directory server is shutting down, and cannot take ownership of new floating single-master operation roles.
The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.
The directory service was unable to transfer ownership of one or more floating single-master operation roles to other servers.
The replication operation failed.
An invalid parameter was specified for this replication operation.
The directory service is too busy to complete the replication operation at this time.
The distinguished name specified for this replication operation is invalid.
The naming context specified for this replication operation is invalid.
The distinguished name specified for this replication operation already exists.
The replication system encountered an internal error.
The replication operation encountered a database inconsistency.
The server specified for this replication operation could not be contacted.
The replication operation encountered an object with an invalid instance type.
The replication operation failed to allocate memory.
The replication operation encountered an error with the mail system.
The replication reference information for the target server already exists.
The replication reference information for the target server does not exist.
The naming context cannot be removed because it is replicated to another server.
The replication operation encountered a database error.
The naming context is in the process of being removed or is not replicated from the specified server.
Replication access was denied.
The requested operation is not supported by this version of the directory service.
The replication remote procedure call was cancelled.
The source server is currently rejecting replication requests.
The destination server is currently rejecting replication requests.
The replication operation failed due to a collision of object names.
The replication source has been reinstalled.
The replication operation failed because a required parent object is missing.
The replication operation was preempted.
The replication synchronization attempt was abandoned because of a lack of updates.
The replication operation was terminated because the system is shutting down.
Synchronization attempt failed because the destination DC is currently waiting to synchronize new partial attributes from source. This condition is normal if a recent schema change modified the partial attribute set. The destination partial attribute set is not a subset of source partial attribute set.
The replication synchronization attempt failed because a master replica attempted to sync from a partial replica.
The server specified for this replication operation was contacted, but that server was unable to contact an additional server needed to complete the operation.
The version of the directory service schema of the source forest is not compatible with the version of directory service on this computer.
Schema update failed: An attribute with the same link identifier already exists.
Name translation: Generic processing error.
Name translation: Could not find the name or insufficient right to see name.
Name translation: Input name mapped to more than one output name.
Name translation: Input name found, but not the associated output format.
Name translation: Unable to resolve completely, only the domain was found.
Name translation: Unable to perform purely syntactical mapping at the client without going out to the wire.
Modification of a constructed attribute is not allowed.
The OM-Object-Class specified is incorrect for an attribute with the specified syntax.
The replication request has been posted; waiting for reply.
The requested operation requires a directory service, and none was available.
The LDAP display name of the class or attribute contains non-ASCII characters.
The requested search operation is only supported for base searches.
The search failed to retrieve attributes from the database.
The schema update operation tried to add a backward link attribute that has no corresponding forward link.
Source and destination of a cross-domain move do not agree on the object’s epoch number. Either source or destination does not have the latest version of the object.
Source and destination of a cross-domain move do not agree on the object’s current name. Either source or destination does not have the latest version of the object.
Source and destination for the cross-domain move operation are identical. Caller should use local move operation instead of cross-domain move operation.
Source and destination for a cross-domain move are not in agreement on the naming contexts in the forest. Either source or destination does not have the latest version of the Partitions container.
Destination of a cross-domain move is not authoritative for the destination naming context.
Source and destination of a cross-domain move do not agree on the identity of the source object. Either source or destination does not have the latest version of the source object.
Object being moved across-domains is already known to be deleted by the destination server. The source server does not have the latest version of the source object.
Another operation which requires exclusive access to the PDC FSMO is already in progress.
A cross-domain move operation failed such that two versions of the moved object exist – one each in the source and destination domains. The destination object needs to be removed to restore the system to a consistent state.
This object may not be moved across domain boundaries either because cross-domain moves for this class are disallowed, or the object has some special characteristics, e.g.: trust account or restricted RID, which prevent its move.
Can’t move objects with memberships across domain boundaries as once moved, this would violate the membership conditions of the account group. Remove the object from any account group memberships and retry.
A naming context head must be the immediate child of another naming context head, not of an interior node.
The directory cannot validate the proposed naming context name because it does not hold a replica of the naming context above the proposed naming context. Please ensure that the domain naming master role is held by a server that is configured as a global catalog server, and that the server is up to date with its replication partners. (Applies only to Windows 2000 Domain Naming masters.)
Destination domain must be in native mode.
The operation cannot be performed because the server does not have an infrastructure container in the domain of interest.
Cross-domain move of non-empty account groups is not allowed.
Cross-domain move of non-empty resource groups is not allowed.
The search flags for the attribute are invalid. The ANR bit is valid only on attributes of Unicode or Teletex strings.
Tree deletions starting at an object which has an NC head as a descendant are not allowed.
The directory service failed to lock a tree in preparation for a tree deletion because the tree was in use.
The directory service failed to identify the list of objects to delete while attempting a tree deletion.
Security Accounts Manager initialization failed because of the following error: %1. Error Status: 0x%2. Please shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.
Only an administrator can modify the membership list of an administrative group.
Cannot change the primary group ID of a domain controller account.
An attempt is made to modify the base schema.
Adding a new mandatory attribute to an existing class, deleting a mandatory attribute from an existing class, or adding an optional attribute to the special class Top that is not a backlink attribute (directly or through inheritance, for example, by adding or deleting an auxiliary class) is not allowed.
Schema update is not allowed on this DC because the DC is not the schema FSMO Role Owner.
An object of this class cannot be created under the schema container. You can only create attribute-schema and class-schema objects under the schema container.
The replica/child install failed to get the objectVersion attribute on the schema container on the source DC. Either the attribute is missing on the schema container or the credentials supplied do not have permission to read it.
The replica/child install failed to read the objectVersion attribute in the SCHEMA section of the file schema.ini in the system32 directory.
The specified group type is invalid.
You cannot nest global groups in a mixed domain if the group is security-enabled.
You cannot nest local groups in a mixed domain if the group is security-enabled.
A global group cannot have a local group as a member.
A global group cannot have a universal group as a member.
A universal group cannot have a local group as a member.
A global group cannot have a cross-domain member.
A local group cannot have another cross domain local group as a member.
A group with primary members cannot change to a security-disabled group.
The schema cache load failed to convert the string default SD on a class-schema object.
Only DSAs configured to be Global Catalog servers should be allowed to hold the Domain Naming Master FSMO role. (Applies only to Windows 2000 servers.)
The DSA operation is unable to proceed because of a DNS lookup failure.
While processing a change to the DNS Host Name for an object, the Service Principal Name values could not be kept in sync.
The Security Descriptor attribute could not be read.
The object requested was not found, but an object with that key was found.
The syntax of the linked attribute being added is incorrect. Forward links can only have syntax 220.127.116.11, 18.104.22.168, and 22.214.171.124, and backlinks can only have syntax 126.96.36.199.
Security Account Manager needs to get the boot password.
Security Account Manager needs to get the boot key from floppy disk.
Directory Service cannot start.
Directory Services could not start.
The connection between client and server requires packet privacy or better.
The source domain may not be in the same forest as destination.
The destination domain must be in the forest.
The operation requires that destination domain auditing be enabled.
The operation couldn’t locate a DC for the source domain.
The source object must be a group or user.
The source object’s SID already exists in destination forest.
The source and destination object must be of the same type.
Security Accounts Manager initialization failed because of the following error: %1. Error Status: 0x%2. Click OK to shut down the system and reboot into Safe Mode. Check the event log for detailed information.
Schema information could not be included in the replication request.
The replication operation could not be completed due to a schema incompatibility.
The replication operation could not be completed due to a previous schema incompatibility.
The replication update could not be applied because either the source or the destination has not yet received information regarding a recent cross-domain move operation.
The requested domain could not be deleted because there exist domain controllers that still host this domain.
The requested operation can be performed only on a global catalog server.
A local group can only be a member of other local groups in the same domain.
Foreign security principals cannot be members of universal groups.
The attribute is not allowed to be replicated to the GC because of security reasons.
The checkpoint with the PDC could not be taken because there too many modifications being processed currently.
The operation requires that source domain auditing be enabled.
Security principal objects can only be created inside domain naming contexts.
A Service Principal Name (SPN) could not be constructed because the provided hostname is not in the necessary format.
A Filter was passed that uses constructed attributes.
The unicodePwd attribute value must be enclosed in double quotes.
Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased.
For security reasons, the operation must be run on the destination DC.
For security reasons, the source DC must be NT4SP4 or greater.
Critical Directory Service System objects cannot be deleted during tree delete operations. The tree delete may have been partially performed.
Directory Services could not start because of the following error: %1. Error Status: 0x%2. Please click OK to shutdown the system. You can use the recovery console to diagnose the system further.
Security Accounts Manager initialization failed because of the following error: %1. Error Status: 0x%2. Please click OK to shutdown the system. You can use the recovery console to diagnose the system further.
The version of the operating system is incompatible with the current AD DS forest functional level or AD LDS Configuration Set functional level. You must upgrade to a new version of the operating system before this server can become an AD DS Domain Controller or add an AD LDS Instance in this AD DS Forest or AD LDS Configuration Set.
The version of the operating system installed is incompatible with the current domain functional level. You must upgrade to a new version of the operating system before this server can become a domain controller in this domain.
The version of the operating system installed on this server no longer supports the current AD DS Forest functional level or AD LDS Configuration Set functional level. You must raise the AD DS Forest functional level or AD LDS Configuration Set functional level before this server can become an AD DS Domain Controller or an AD LDS Instance in this Forest or Configuration Set.
The version of the operating system installed on this server no longer supports the current domain functional level. You must raise the domain functional level before this server can become a domain controller in this domain.
The version of the operating system installed on this server is incompatible with the functional level of the domain or forest.
The functional level of the domain (or forest) cannot be raised to the requested value, because there exist one or more domain controllers in the domain (or forest) that are at a lower incompatible functional level.
The forest functional level cannot be raised to the requested value since one or more domains are still in mixed domain mode. All domains in the forest must be in native mode, for you to raise the forest functional level.
The sort order requested is not supported.
The requested name already exists as a unique identifier.
The machine account was created pre-NT4. The account needs to be recreated.
The database is out of version store.
Unable to continue operation because multiple conflicting controls were used.
Unable to find a valid security descriptor reference domain for this partition.
Schema update failed: The link identifier is reserved.
Schema update failed: There are no link identifiers available.
An account group cannot have a universal group as a member.
Rename or move operations on naming context heads or read-only objects are not allowed.
Move operations on objects in the schema naming context are not allowed.
A system flag has been set on the object and does not allow the object to be moved or renamed.
This object is not allowed to change its grandparent container. Moves are not forbidden on this object, but are restricted to sibling containers.
Unable to resolve completely, a referral to another forest is generated.
The requested action is not supported on standard server.
Could not access a partition of the directory service located on a remote server. Make sure at least one server is running for the partition in question.
The directory cannot validate the proposed naming context (or partition) name because it does not hold a replica nor can it contact a replica of the naming context above the proposed naming context. Please ensure that the parent naming context is properly registered in DNS, and at least one replica of this naming context is reachable by the Domain Naming master.
The thread limit for this request was exceeded.
The Global catalog server is not in the closest site.
The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the corresponding server object in the local DS database has no serverReference attribute.
The Directory Service failed to enter single user mode.
The Directory Service cannot parse the script because of a syntax error.
The Directory Service cannot process the script because of an error.
The directory service cannot perform the requested operation because the servers involved are of different replication epochs (which is usually related to a domain rename that is in progress).
The directory service binding must be renegotiated due to a change in the server extensions information.
Operation not allowed on a disabled cross ref.
Schema update failed: No values for msDS-IntId are available.
Schema update failed: Duplicate msDS-INtId. Retry the operation.
Schema deletion failed: attribute is used in rDNAttID.
The directory service failed to authorize the request.
The Directory Service cannot process the script because it is invalid.
The remote create cross reference operation failed on the Domain Naming Master FSMO. The operation’s error is in the extended data.
A cross reference is in use locally with the same name.
The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the server’s domain has been deleted from the forest.
Writeable NCs prevent this DC from demoting.
The requested object has a non-unique identifier and cannot be retrieved.
Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.
The group cannot be converted due to attribute restrictions on the requested group type.
Cross-domain move of non-empty basic application groups is not allowed.
Cross-domain move of non-empty query based application groups is not allowed.
The FSMO role ownership could not be verified because its directory partition has not replicated successfully with at least one replication partner.
The target container for a redirection of a well known object container cannot already be a special container.
The Directory Service cannot perform the requested operation because a domain rename operation is in progress.
The directory service detected a child partition below the requested partition name. The partition hierarchy must be created in a top down method.
The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
The requested operation is not allowed on an object under the system container.
The LDAP servers network send queue has filled up because the client is not processing the results of its requests fast enough. No more requests will be processed until the client catches up. If the client does not catch up then it will be disconnected.
The scheduled replication did not take place because the system was too busy to execute the request within the schedule window. The replication queue is overloaded. Consider reducing the number of partners or decreasing the scheduled replication frequency.
At this time, it cannot be determined if the branch replication policy is available on the hub domain controller. Please retry at a later time to account for replication latencies.
The site settings object for the specified site does not exist.
The local account store does not contain secret material for the specified account.
Could not find a writable domain controller in the domain.
The server object for the domain controller does not exist.
The NTDS Settings object for the domain controller does not exist.
The requested search operation is not supported for ASQ searches.
A required audit event could not be generated for the operation.
The search flags for the attribute are invalid. The subtree index bit is valid only on single valued attributes.
The search flags for the attribute are invalid. The tuple index bit is valid only on attributes of Unicode strings.
The address books are nested too deeply. Failed to build the hierarchy table.
The specified up-to-date-ness vector is corrupt.
The request to replicate secrets is denied.
Schema update failed: The MAPI identifier is reserved.
Schema update failed: There are no MAPI identifiers available.
The replication operation failed because the required attributes of the local krbtgt object are missing.
The domain name of the trusted domain already exists in the forest.
The flat name of the trusted domain already exists in the forest.
The User Principal Name (UPN) is invalid.
OID mapped groups cannot have members.
The specified OID cannot be found.
The replication operation failed because the target object referred by a link value is recycled.
The redirect operation failed because the target object is in a NC different from the domain NC of the current domain controller.
The functional level of the AD LDS configuration set cannot be lowered to the requested value.
The functional level of the domain (or forest) cannot be lowered to the requested value.
The functional level of the AD LDS configuration set cannot be raised to the requested value, because there exist one or more ADLDS instances that are at a lower incompatible functional level.
The domain join cannot be completed because the SID of the domain you attempted to join was identical to the SID of this machine. This is a symptom of an improperly cloned operating system install. You should run sysprep on this machine in order to generate a new machine SID. Please see https://go.microsoft.com/fwlink/p/?linkid=168895 for more information.
The undelete operation failed because the Sam Account Name or Additional Sam Account Name of the object being undeleted conflicts with an existing live object.
The system is not authoritative for the specified account and therefore cannot complete the operation. Please retry the operation using the provider associated with this account. If this is an online provider please use the provider’s online site.