Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Error 0x00002072 means Windows tried to add an Active Directory object whose class has no usable relative distinguished name (RDN) defined in the directory schema. Microsoft names this condition ERROR_DS_NO_RDN_DEFINED_IN_SCHEMA. It is normally an Active Directory Domain Services (AD DS) object-creation or provisioning problem, not a printer-specific code. The reliable fix is to identify the request that failed, verify its structural class and naming attribute, validate the parent distinguished name (DN), and then correct the client, template, schema deployment, or replication problem responsible. The procedure is the same on Windows 11 and Windows 10, although printer menus and Windows support status differ.
What does error 0x00002072 mean?
Microsoft defines 0x00002072 as: “An attempt was made to add an object of a class that does not have an RDN defined in the schema.” In AD DS, every object is constrained by the directory schema. The most-specific structural class selected when an object is created determines which attribute supplies that object’s RDN.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →An RDN is the object’s name relative to its parent container. A distinguished name is built by joining RDNs with commas, for example CN=Server01,OU=Computers,DC=example,DC=com. The RDN must use the form attribute=value, and the value must be unique among the parent’s immediate children.
The class definition stores the naming attribute in its rDNAttID property. Active Directory requires that naming attribute to use String (Unicode) syntax. If the class has no usable rDNAttID, the request omits the naming attribute, or the DN is malformed, object creation can fail with this code.
Popular on Amazon
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Why is Windows returning this code?
The hexadecimal value identifies a schema/RDN failure, but it does not identify the application or the exact malformed field. Check the request and directory state rather than guessing from the code alone.
- Wrong structural class: the client selected an objectClass that is not valid for the object it is trying to create.
- Incomplete custom schema: a custom class was added without a usable
rDNAttID, or the naming attribute is missing or incompatible. - Missing or invalid naming value: the request does not provide the attribute used for the RDN, or supplies a value that violates DN syntax.
- Bad parent DN: the parent does not exist, contains an improperly escaped character, or causes the request to be interpreted in an unexpected container.
- Replication mismatch: a schema extension exists on the schema master but has not reached the domain controller processing the request.
These are diagnostic possibilities derived from the documented class, RDN, naming-attribute and DN rules. Confirm the failing request and the live schema before changing anything.
How do I fix 0x00002072 step by step?
Use this sequence on the domain controller and workstation involved in the failure. Keep the original request and error text so you can prove which change corrected the problem.
1. Capture the exact operation
- Record the application or provisioning service that displayed the error.
- Note the timestamp, user or service account, domain, and domain controller that handled the request.
- Capture the complete error text and any event-log entry, not just the hexadecimal value.
- Copy the proposed
objectClass, parent DN, RDN, and all attributes sent in the add request. If a vendor tool hides these fields, enable its diagnostic or LDAP logging.
The code can be raised by a line-of-business application, an identity-sync job, a script, or a setup wizard. Finding the emitter prevents you from applying an unrelated printer or driver fix.
2. Confirm that the failing action is an AD object add
Determine whether the operation is creating a user, computer, service, configuration, application, or custom directory object. A setup program may show a Windows-style error while its underlying action is an LDAP add or an update to a directory-backed resource.
If the operation is not contacting AD DS at all, obtain the application’s complete log and identify the component that translated the failure into 0x00002072. Do not assume that a code shown beside a printer, VPN, or other device proves that the device driver is at fault.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchAlso popular on Amazon
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
3. Inspect the structural class and its naming attribute
On the domain controller that received the request, inspect the relevant classSchema object in the Configuration naming context. ADSI Edit can browse CN=Schema,CN=Configuration,...; directory administrators can also query the schema with an LDAP browser or the Active Directory PowerShell module.
- Locate the exact structural class named by the request’s
objectClass. - Read its
rDNAttIDproperty and identify the attribute it names. - Verify that the attribute exists in the schema and is valid for the class.
- Confirm that the request supplies that attribute with the value intended for the new object’s RDN.
Do not edit the class or attribute directly in ADSI Edit as an experiment. Schema objects affect the forest and require a tested change plan, appropriate permissions, and a current directory backup.
4. Validate the parent DN and proposed RDN
Check each component of the parent DN from right to left. The domain naming components must identify the correct directory, and every organizational-unit or container component must exist on the target domain controller.
- Use
attribute=valuefor every RDN component. - Escape commas, plus signs, quotation marks, leading or trailing spaces, and other reserved characters according to LDAP DN rules.
- Ensure the proposed RDN is unique among the parent’s children. Two siblings cannot have the same RDN value for the same naming attribute.
- Check for accidental whitespace, an empty value, a copied quotation mark, or a value truncated by the calling application’s parser.
A DN such as CN=Smith, John,OU=Users,DC=example,DC=com is not equivalent to one where the comma in the common name is correctly escaped. Correct the escaping in the source request rather than manually renaming unrelated objects.
5. Compare the request with a known-good object
Find an existing object of the same structural class in the same kind of container. Compare its complete objectClass list, RDN attribute, DN layout, and required attributes with the failing request.
For administrators with the Active Directory module installed, a read-only query such as Get-ADObject -Identity "CN=KnownObject,OU=Container,DC=example,DC=com" -Properties objectClass,distinguishedName can confirm the live class and DN. Use the actual distinguished name from your environment; do not run a delete or modify operation while diagnosing.
Also popular on Amazon
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
If the known-good object uses a different structural class or naming attribute, update the provisioning template rather than copying arbitrary optional attributes. If both objects use the same class but only one domain controller fails, investigate replication and server-specific state.
6. Check schema-extension and replication status
When the failing class or attribute was recently introduced, verify that the schema extension completed on the schema master and replicated to the domain controller receiving the request. Compare the class definition and naming attribute on both servers.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Look for recent directory-service events, replication failures, or a domain controller that has been offline. A request can be valid against the intended schema and still fail when routed to a controller with an older schema view.
- Pause automated provisioning while the schema state is uncertain.
- Confirm which server holds the schema master role and which server processed the failed add.
- Use your organization’s approved replication diagnostics and change records to verify convergence.
- Do not force ad-hoc edits to
rDNAttIDor other schema attributes in production.
If the extension is incomplete, an experienced directory administrator should repair or roll it back under change control. Preserve a documented before-and-after state and a current, tested directory recovery plan.
7. Correct the client, script, or provisioning template
After identifying the mismatch, fix the source that builds the add request.
- Select the correct structural
objectClassfor the object type. - Populate the class’s naming attribute with the value that should appear in the RDN.
- Build the parent DN from a verified existing container.
- Escape reserved DN characters before sending the request.
- Check that the RDN is not already present under the parent.
- Run the corrected request against a test container or lab domain before production.
When a vendor application owns the template, provide its support team with the captured class, parent DN, RDN, server, timestamp, and schema comparison. Asking for a generic “Windows repair” will usually omit the information needed to correct the LDAP request.
Also popular on Amazon
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
8. Retry and verify the resulting object
Retry the same operation only after the request and directory state are understood. A successful return code is not enough: read the created object and verify its final distinguished name, structural class, naming attribute, parent container, and required properties.
Check that the object appears on the expected domain controller and that replication carries it to the other controllers used by the application. If the retry produces a different error, keep the new code separate from 0x00002072; it may indicate permissions, uniqueness, constraints, or another stage of provisioning.
What should I do if the code appears while installing a printer?
Printer setup can expose directory or application errors, but 0x00002072 itself is assigned to AD DS schema object creation. First determine whether the setup tool is creating or updating a computer, user, service, or printer-related directory object.
If the directory operation is confirmed and fails as described above, repair the class, RDN, DN, or replication issue before repeating printer setup. If no directory operation is involved, troubleshoot the printer independently:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Check the USB cable, network connection, wireless association, and printer power.
- Restart the Windows Print Spooler service and clear only the queue that is stuck.
- Install the current driver supplied for the exact printer model and Windows edition, or remove and reinstall the existing package.
- Run the built-in printer troubleshooter available in your Windows release.
- Remove the printer from Windows and add it again using the correct USB, TCP/IP, or shared-printer path.
Those steps address discovery, queue, and driver failures; they do not change the meaning of the canonical 0x00002072 code. Keep the two investigations separate so a successful printer reinstall does not hide an unresolved directory problem.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Is the fix different on Windows 10 and Windows 11?
The Win32 definition and AD DS behavior are the same on both releases. The Windows 11 and Windows 10 Settings paths for printer troubleshooting can differ, but neither operating-system version changes the classSchema or RDN requirements.
Also popular on Amazon
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Microsoft ended Windows 10 support on October 14, 2025. Windows 10 can continue to run, but it no longer receives free Windows Update support, technical assistance, or security fixes. That lifecycle fact is separate from the directory error: moving to Windows 11 will not correct a malformed object-creation request or an incomplete schema extension.
Which remediation path is safest?
Choose the smallest change that explains the evidence and can be verified after the retry.
| Remediation | Typical scope | Risk and permissions | How to validate |
|---|---|---|---|
| Correct a client request or template | One application, script, or object type | Usually reversible; may require application-owner access | Successful add with the intended class, RDN, and DN |
| Fix a parent DN or escaping error | One container path or naming value | Low directory-wide impact; requires accurate DN testing | Parent resolves and the RDN is unique and readable |
| Resolve schema replication | One or more domain controllers after a schema change | Requires elevated directory rights and controlled diagnostics | Matching classSchema and rDNAttID on processing servers |
| Repair or roll back a custom schema extension | Forest-wide schema | Highest impact; formal change control and recovery planning required | Documented before/after state, converged replication, and lab-tested retry |
Prefer request correction when the schema is valid. Treat schema modification as a last-resort administrative change, not as a way to silence one application’s error.
What common mistakes prevent the repair?
- Changing printer drivers first: this wastes time when the setup program is actually issuing an LDAP add.
- Guessing the RDN attribute: the naming attribute is defined by the class’s
rDNAttID; it is not interchangeable with any convenient display-name field. - Editing schema objects directly: an improvised change can affect every domain controller and make recovery harder.
- Testing only on one controller: a request may succeed against a converged server and fail against one with stale schema data.
- Ignoring sibling uniqueness: a valid-looking RDN still fails if the same name already exists under the parent.
- Retrying without preserving logs: once the request changes, you may lose the evidence needed to distinguish a fixed cause from a new error.
How can I prevent a repeat failure?
Version-control provisioning templates and record the structural class, naming attribute, parent DN, and escaping rules alongside each object type. Test custom classes and attributes in a lab forest before extending production, and schedule schema changes with a documented rollback and backup plan.
For recurring failures, alert on the application event that contains the full LDAP request context rather than on the hexadecimal code alone. Maintaining a known-good sample object for each custom class gives administrators a quick comparison when a new deployment starts failing.
As an optional shortcut for general Windows cleanup and diagnostics, Outbyte PC Repair can address more than 100 common Windows issues where possible, reduce selected CPU, RAM, and disk load through settings, clean temporary and cache files, show an app-crash log, and run vulnerability checks. It runs on Windows 11, 10, 8, and 7 with a free trial by category of at least two days followed by a subscription; it complements an antivirus rather than replacing one, and results vary, so it does not replace correcting an AD DS schema or RDN request.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsFrequently Asked Questions
Can restarting the domain controller clear 0x00002072?
A restart can reload services after a separate maintenance event, but it does not add an RDN to a class or repair a malformed LDAP request. Restart only within an approved maintenance window, and use the captured request and schema comparison to identify the actual cause.
Where can I see which domain controller processed the failed add?
Check the application’s LDAP or directory-service log, authentication context, and the server named in the event details. If the application does not record it, enable diagnostic logging for a single reproduction and disable verbose logging afterward to limit sensitive directory data.
Can I create an object without an RDN and rename it later?
No. Active Directory needs a valid RDN at creation time because the RDN is part of the object’s distinguished name. Create the object with the class’s naming attribute, then perform a controlled rename if a later name change is required.
Should I change the objectClass to make the error disappear?
Only when the selected class is demonstrably wrong for the object being created. Substituting a different class can produce an object that violates application expectations, so compare the request with a known-good object and the application’s schema requirements first.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
