How to fix error error-ds-obj-class-violation in Windows 11

Solution Steps

1. 1 Open 'Active Directory Users and Computers' by pressing Windows key + R, typing 'dsa.msc', and pressing Enter. Navigate to the container where the problematic object resides. Right-click the object and select 'Properties'. Check the 'Object' tab to see the object class. This helps you understand what class the object is supposed to be.
2. 2 If the object class is incorrect, use PowerShell to correct it. Open PowerShell as administrator (Windows key + X, then 'Terminal (Admin)'). Use the command 'Get-ADObject -Filter {Name -eq "objectname"}' to find the object's distinguished name. Then use 'Set-ADObject -Identity "distinguishedname" -Replace @{objectClass="correctclass"}' to fix it.
3. 3 If you're unsure of the correct class, compare with similar objects in the same OU. Right-click a working object, select 'Properties', and note the class. Use that as a reference.
4. 4 If the error occurs during a script, review the script's code for incorrect attribute assignments. Check the schema definition for the object class using 'ADSI Edit' (adsiedit.msc). Ensure all mandatory attributes are set.
5. 5 After corrections, run 'repadmin /syncall' to force replication across domain controllers. This ensures the fix propagates.
6. 6 If the object is beyond repair, delete it and recreate it with the correct class. Use ADUC to delete, then create a new object with the proper template.