ERROR_DS_CANT_MOD_SYSTEM_ONLY - 8369 (0x20B1)
The attribute cannot be modified because it is owned by the system.
Updated: Feb 21, 2026
Technical Meaning
The ERROR_DS_CANT_MOD_SYSTEM_ONLY error indicates that an attempt was made to modify a system-owned attribute, which is not allowed. This error typically occurs in the context of directory service operations within Active Directory.
Error Details
This error code is specific to scenarios where certain attributes are protected and cannot be altered by non-system processes or users. The exact attribute that cannot be modified will depend on the operation being performed and the underlying system configuration.
Usage Context
The ERROR_DS_CANT_MOD_SYSTEM_ONLY error can occur in various directory service operations, such as modifying user accounts, group policies, or other system-managed entities within Active Directory. It is important to note that this error does not indicate a failure of the operation itself but rather a restriction on modifying certain attributes.
Developer Interpretation
When encountering ERROR_DS_CANT_MOD_SYSTEM_ONLY, developers should understand that they are attempting to modify an attribute that is owned by the system and cannot be changed. This could include attributes related to security, permissions, or other critical system configurations. Developers should ensure that their operations respect these restrictions and avoid modifying such attributes.
Related Errors
ERROR_DS_CANT_MOD_PRIMARYGROUP(8370): Cannot modify primary group of a user account.ERROR_DS_CANT_CHANGE_SYSTEM_FLAG_ON_OBJECT_VIOLATION(1224): Violation of system flag modification rules on an object.
FAQ
Q: What does the ERROR_DS_CANT_MOD_SYSTEM_ONLY error mean?
A: It indicates that an attempt was made to modify a system-owned attribute, which is not allowed in the current context.
Q: How can I resolve this issue?
A: Ensure that you are not attempting to modify attributes that are protected by the system. Review your operation context and parameters to ensure they comply with system restrictions.
Summary
The ERROR_DS_CANT_MOD_SYSTEM_ONLY error is a specific technical indication that certain attributes cannot be modified due to their ownership by the system. Developers should adhere to these restrictions when performing operations within Active Directory or other directory service environments.