ERROR_DS_LOW_ADLDS_FFL - 8643 (0x21C3)
The functional level of the AD LDS configuration set cannot be raised to the requested value, because there exist one or more ADLDS instances that are at a lower incompatible functional level.
Updated: Feb 21, 2026
Technical Background
The ERROR_DS_LOW_ADLDS_FFL error code, with the numeric value 8643 or hexadecimal representation 0x21C3, is encountered when attempting to upgrade the functional level of an Active Directory Lightweight Directory Services (AD LDS) configuration set. This error specifically indicates that one or more AD LDS instances within the configuration set are at a lower incompatible functional level, preventing the overall configuration from being upgraded.
Error Details
When upgrading the functional level of an AD LDS configuration set, all instances within the set must meet the required functional level standards. If any instance is found to be at a lower functional level that does not support the requested upgrade, this error is returned. This ensures data consistency and operational integrity across the entire configuration.
Common Causes
- Incorrect Functional Level of Existing Instances: Some AD LDS instances within the configuration set are configured with a functional level that is incompatible with the desired upgrade path.
- Configuration Set Inconsistency: The configuration set contains a mix of AD LDS instances at different functional levels, making it impossible to apply a uniform upgrade.
Real-World Context
This error typically occurs during administrative tasks such as upgrading the schema or functional level of an AD LDS deployment. It is crucial for maintaining consistency and ensuring that all components operate under compatible conditions.
Is This Error Critical?
Yes, this error can prevent critical operations from being completed successfully. It is essential to address this issue before proceeding with any further administrative tasks related to the AD LDS configuration set.
How to Diagnose
- Review Configuration Set: Examine the current functional levels of all instances within the AD LDS configuration set.
- Identify Incompatible Instances: Determine which instances are at a lower functional level that does not support the requested upgrade.
- Validate Functional Levels: Ensure that all instances meet the required functional level standards for the desired upgrade.
How to Resolve
- Upgrade Lower-Level Instances: Upgrade any AD LDS instances found to be at a lower incompatible functional level to match the required standard.
- Consolidate Configuration Set: If necessary, consolidate or reconfigure the configuration set to ensure all instances are compatible with the desired upgrade path.
Developer Notes
- Ensure that all components of an AD LDS configuration set are at the same functional level before attempting any upgrades.
- Regularly review and update the functional levels of AD LDS instances to maintain compatibility and operational integrity.
Related Errors
ERROR_DS_CANT_CHANGE_SYSTEM_ONLY: Indicates that a system-only attribute cannot be modified.ERROR_DS_CANT_MODIFY_SYSTEM_ONLY: Indicates that an attempt was made to modify a read-only attribute.
FAQ
Q: What does the ERROR_DS_LOW_ADLDS_FFL error mean?
A: This error indicates that the AD LDS configuration set cannot be upgraded due to lower incompatible functional levels of existing instances.
Q: How can I resolve this issue?
A: Upgrade or reconfigure the AD LDS instances to match the required functional level before attempting the upgrade again.
Summary
The ERROR_DS_LOW_ADLDS_FFL error signifies that an AD LDS configuration set cannot be upgraded due to incompatible functional levels of existing instances. Addressing this issue by upgrading lower-level instances ensures a consistent and compatible deployment.