Microsoft error codes

The requested operation can be performed only on a global catalog server.

A local group can only be a member of other local groups in the same domain.

Foreign security principals cannot be members of universal groups.

The attribute is not allowed to be replicated to the GC because of security reasons.

The checkpoint with the PDC could not be taken because there too many modifications being processed currently.

The operation requires that source domain auditing be enabled.

Security principal objects can only be created inside domain naming contexts.

A Service Principal Name (SPN) could not be constructed because the provided hostname is not in the necessary format.

A Filter was passed that uses constructed attributes.

The unicodePwd attribute value must be enclosed in double quotes.

Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased.

For security reasons, the operation must be run on the destination DC.

For security reasons, the source DC must be NT4SP4 or greater.

Critical Directory Service System objects cannot be deleted during tree delete operations. The tree delete may have been partially performed.

Directory Services could not start because of the following error: %1. Error Status: 0x%2. Please click OK to shutdown the system. You can use the recovery console to diagnose the system further.

Security Accounts Manager initialization failed because of the following error: %1. Error Status: 0x%2. Please click OK to shutdown the system. You can use the recovery console to diagnose the system further.

The version of the operating system is incompatible with the current AD DS forest functional level or AD LDS Configuration Set functional level. You must upgrade to a new version of the operating system before this server can become an AD DS Domain Controller or add an AD LDS Instance in this AD DS Forest or AD LDS Configuration Set.

The version of the operating system installed is incompatible with the current domain functional level. You must upgrade to a new version of the operating system before this server can become a domain controller in this domain.

The version of the operating system installed on this server no longer supports the current AD DS Forest functional level or AD LDS Configuration Set functional level. You must raise the AD DS Forest functional level or AD LDS Configuration Set functional level before this server can become an AD DS Domain Controller or an AD LDS Instance in this Forest or Configuration Set.

The version of the operating system installed on this server no longer supports the current domain functional level. You must raise the domain functional level before this server can become a domain controller in this domain.

The version of the operating system installed on this server is incompatible with the functional level of the domain or forest.

The functional level of the domain (or forest) cannot be raised to the requested value, because there exist one or more domain controllers in the domain (or forest) that are at a lower incompatible functional level.

The forest functional level cannot be raised to the requested value since one or more domains are still in mixed domain mode. All domains in the forest must be in native mode, for you to raise the forest functional level.

The sort order requested is not supported.

The requested name already exists as a unique identifier.

The machine account was created pre-NT4. The account needs to be recreated.

The database is out of version store.

Unable to continue operation because multiple conflicting controls were used.

Unable to find a valid security descriptor reference domain for this partition.

Schema update failed: The link identifier is reserved.

Schema update failed: There are no link identifiers available.

An account group cannot have a universal group as a member.

Rename or move operations on naming context heads or read-only objects are not allowed.

Move operations on objects in the schema naming context are not allowed.

A system flag has been set on the object and does not allow the object to be moved or renamed.

This object is not allowed to change its grandparent container. Moves are not forbidden on this object, but are restricted to sibling containers.

Unable to resolve completely, a referral to another forest is generated.

The requested action is not supported on standard server.

Could not access a partition of the directory service located on a remote server. Make sure at least one server is running for the partition in question.

The directory cannot validate the proposed naming context (or partition) name because it does not hold a replica nor can it contact a replica of the naming context above the proposed naming context. Please ensure that the parent naming context is properly registered in DNS, and at least one replica of this naming context is reachable by the Domain Naming master.