ERROR_DS_CANT_ADD_TO_GC - 8550 (0x2166)
The attribute is not allowed to be replicated to the GC because of security reasons.
Updated: Feb 21, 2026
Technical Meaning
The error code ERROR_DS_CANT_ADD_TO_GC with the numeric value 8550 and hexadecimal representation 0x2166 indicates that an attempt to replicate a specific attribute to the Global Catalog (GC) has been denied due to security constraints. This error is part of the Windows Directory Services API, specifically related to Active Directory operations.
Error Details
Replication in Active Directory involves synchronizing data between different domain controllers and the Global Catalog. The GC serves as a read-only replica that contains a subset of attributes from each domain controller's directory partition. Certain attributes may be restricted for replication to the GC due to security policies, ensuring sensitive information is not exposed.
Usage Context
This error typically occurs when an application or script attempts to modify or replicate an attribute that has been designated as non-replicable to the Global Catalog. Such restrictions are often applied to attributes containing sensitive data like passwords or other confidential information.
Developer Interpretation
Developers should be aware of the security implications and ensure that only appropriate attributes are replicated to the GC. This error can be encountered during operations such as schema modifications, attribute additions, or replication tasks involving the Global Catalog. Developers must consult the relevant Active Directory documentation for a comprehensive list of attributes that may be restricted.
Related Errors
ERROR_DS_ATT_NOT_DEF_IN_SCHEMA(8529)ERROR_DS_CANT_MOD_ATT(8514)ERROR_DS_CANT_REM_MISSING_ATT(8530)
FAQ
Q: What does this error mean?
A: This error indicates that an attempt to replicate a specific attribute to the Global Catalog has been denied due to security reasons.
Q: How can I resolve this issue?
A: Ensure that only appropriate attributes are replicated to the Global Catalog. Consult Active Directory documentation for a list of restricted attributes and adjust your operations accordingly.
Summary
ERROR_DS_CANT_ADD_TO_GC is an error code indicating that an attempt to replicate a specific attribute to the Global Catalog has been denied due to security constraints. Developers should be aware of this restriction when performing replication tasks in Active Directory.