• Skip to main content
  • Skip to primary sidebar

Technipages

Tutorials and fixes for smartphone, gadget, and computer problems

  • Topics
    • Android
    • Gaming
    • Hardware
    • Internet
    • iOS
    • MacOS
    • Office
    • Software
    • Windows
    • Definitions
  • Product Reviews
  • Downloads
  • About Technipages

Active Directory: Fix Replication Error 8203

By Mitch Bartlett Leave a Comment

We had quite an issue with replication in our Active Director environment this past week. We suddenly were hit with tons of events in the event log with event ID 1694 where it said:

Replication Error 8203 “The attribute syntax specified to the directory service is invalid.”

This error means that there is an attribute set on an object somehwere in Active Directory is not valid. That could mean that there is a strange character somehwere, or an attribute that requires a Distinguised Name being set with a string.

To fix this problem, we pulled more data from those events. Each event tells you the attribue that is problematic. In our case, the log it was the “manager” attribute.

While the log didn’t specify a username with the issue, it did specify a GUID. we can use the following PowerShell command to find the user object.

Get-ADUser -Identity {GUID}

Once you find the user, open the user in Active Directory, and correct the attribute.

In our case, the “manager” field had a strange blank character. We simply clicked “Clear” to clear it out, and the field then said “<not set>” as it should.

Once every one of the problematic accounts were updated, replication resumed as normal.

FAQ

How do I find blank characters set in Active Directory attributes?

We ran the following PowerShell script on each of our Domain Controllers to reveal which objects had a black character in the attribute.

Get-ADObject -Server $_.Name -LDAPfilter '(manager=\20)'

You can also query all domain controllers.

You Might Also Like

  • How to Add or Delete Printers in Active Directory
    How to Add or Delete Printers in Active Directory
  • How to Add Active Directory Schema Snap-In
    How to Add Active Directory Schema Snap-In
  • How to Make Active Directory Replicate Instantly
    How to Make Active Directory Replicate Instantly
  • How to Find Computer Locking Active Directory Account
    How to Find Computer Locking Active Directory Account
  • Windows 10 & 8: Install Active Directory Users and Computers
    Windows 10 & 8: Install Active Directory Users and Computers
  • Use Active Directory Domain Services to Block Website
    Use Active Directory Domain Services to Block Website
  • PowerShell: Check When User Last Set Active Directory Password
    PowerShell: Check When User Last Set Active Directory…
  • Active Directory: How to Check Domain and Forest Functional Level
    Active Directory: How to Check Domain and Forest Functional…
  • Error “Cannot Delete folder: The directory is not empty” Fix
    Error “Cannot Delete folder: The directory is not empty” Fix

Filed Under: Windows Tagged With: Active Directory

Reader Interactions

Did this help? Let us know!

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Primary Sidebar

Recent Posts

  • What Is Host Memory Buffer (HMB) in SSD?
  • DRAM on an SSD: Is It Something You want?
  • 5 Free Android Apps to Remove Red Eye
  • Windows 11: How to Change the Primary Mouse Button
  • Windows 11: Use Fonts and Make Your Text Fantastic
  • Windows 11: How to Manage the Recycling Bin
  • How to Enable Dark Mode in Firefox
  • Windows 11: How to Add Clocks with Different Time Zones

Who’s Behind Technipages?

Baby and Daddy My name is Mitch Bartlett. I've been working in technology for over 20 years in a wide range of tech jobs from Tech Support to Software Testing. I started this site as a technical guide for myself and it has grown into what I hope is a useful reference for all.

You May Also Like

  • Replication

© Copyright 2022 Technipages · All Rights Reserved · Privacy