ERROR_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS - 8637 (0x21BD)
OID mapped groups cannot have members.
Updated: Feb 21, 2026
Technical Meaning
This error code indicates that an attempt was made to add members to a group that is defined using Object Identifier (OID) mapping. OID mapping in Active Directory (AD) is used for interoperability with other directory services and allows the use of OIDs as distinguished names.
Error Details
The specific context where this error occurs is when a group object, which has been mapped to an OID, is being modified by adding members. The system prevents such modifications because groups defined using OID mapping are intended to be immutable in terms of their membership.
Usage Context
This error typically arises during operations that involve modifying the membership of a group within Active Directory. It can occur when attempting to add or remove users from an OID-mapped group, which is not supported by the system design.
Developer Interpretation
Developers should understand that this error code signifies an attempt to perform an unsupported operation on a specific type of AD object. The operation in question involves adding members to a group that has been mapped using OIDs. Developers must ensure that their applications handle such scenarios appropriately, either by avoiding the modification of OID-mapped groups or by implementing workarounds.
Related Errors
- ERROR_DS_DRA_SCHEMA_MISMATCH (0x21B8): This error might be encountered in a similar context where schema mismatches are detected during operations involving AD objects.
- ERROR_DS_OID_NOT_FOUND (0x21C3): This could occur if the OID mapping is not properly configured or recognized by the system, leading to an inability to modify the group membership.
FAQ
Q: What does this error mean?
A: It indicates that you attempted to add members to a group defined using Object Identifier (OID) mapping in Active Directory, which is not supported.
Q: How can I handle this error in my application?
A: Ensure your application checks the type of AD object before attempting modifications. For OID-mapped groups, consider implementing alternative methods for managing membership.
Summary
The ERROR_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS error code is a specific technical indicator that an unsupported operation was attempted on an Active Directory group defined using Object Identifier (OID) mapping. Developers should be aware of this limitation and handle it appropriately in their applications to avoid runtime errors.