You have a Windows 10, version 1607-based or a Windows 10, version 1809-based client that joins a domain with a Windows Server 2008 R2 or Windows Server 2012 R2 controller. Additionally, the Remote Server Administration Tools (RSAT) for Windows 10 is installed on the client. When you right-click the properties of a domain object in Active Directory Administrative Center (ADAC) in this situation, you receive the following error message:

Failed to retrieve the object 'DC=CONTOSO,DC=COM' due to the following error:
The specified directory service attribute or value does not exist Parameter name: msDS-ExpirePasswordsOnSmartCardOnlyAccounts


This issue occurs when the schema version of the domain has not yet been updated.


To work around this issue, use one of the following tools to obtain the properties of a domain object:

  • DSA.msc

  • Ldifde.exe

  • Ldp.exe

  • ADSI Edit (adsiedit.msc)

  • Get-ADObject cmdlet

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!