ERROR_DS_ATTRIBUTE_OWNED_BY_SAM - 8346 (0x209A)

Access to the attribute is not permitted because the attribute is owned by the Security Accounts Manager (SAM).

Updated: Feb 21, 2026

Technical Meaning

The error code ERROR_DS_ATTRIBUTE_OWNED_BY_SAM with the numeric value 8346 and hexadecimal representation 0x209A indicates that an attempt was made to access a directory service attribute, but the operation is not permitted because the attribute is owned by the Security Accounts Manager (SAM). This error typically arises in scenarios involving Active Directory or similar directory services.

Error Details

This specific error code pertains to operations within the Windows API related to directory services. The SAM component of Windows manages critical system accounts and security-related information, which are protected from unauthorized access. When an attempt is made to modify or query a property that belongs exclusively to the SAM, this error is returned.

Usage Context

This error code can be encountered in various scenarios where directory service attributes need to be accessed or modified. It is particularly relevant when dealing with Active Directory objects and their associated properties. Developers should ensure that they have the appropriate permissions before attempting operations on such attributes.

Developer Interpretation

When encountering this error, developers should understand that it signifies a permission issue related to attribute ownership by SAM. This means that the operation being attempted is not supported due to security constraints. The developer must either adjust the operation context or seek alternative methods of achieving the desired outcome without violating these security policies.

Related Errors

  • ERROR_DS_OBJECT_NOT_FOUND (0x80072030): Indicates that an object could not be found, which might occur if the attribute does not exist.
  • ERROR_DS_NO_ATTRIBUTE_OR_VALUE (0x80072051): Suggests that a specified attribute or value is invalid.

FAQ

Q: What causes this error?

A: This error occurs when an attempt is made to access or modify an attribute owned by the SAM, which is not permitted due to security policies.

Q: How can I resolve this issue?

A: Ensure that you have the necessary permissions and that the operation context aligns with the security constraints imposed by the SAM. If the operation cannot be performed as intended, consider alternative methods or consult the documentation for supported operations.

Summary

The ERROR_DS_ATTRIBUTE_OWNED_BY_SAM error code (0x209A) indicates a permission issue related to attribute ownership by the Security Accounts Manager in directory service operations. Developers should handle this error by ensuring appropriate permissions and understanding the security policies governing such attributes.