Symptoms
You have a Windows 10, version 1607-based or a Windows 10, version 1809-based client that joins a domain with a Windows Server 2008 R2 or Windows Server 2012 R2 controller. Additionally, the Remote Server Administration Tools (RSAT) for Windows 10 is installed on the client. When you right-click the properties of a domain object in Active Directory Administrative Center (ADAC) in this situation, you receive the following error message:
Failed to retrieve the object 'DC=CONTOSO,DC=COM' due to the following error:
The specified directory service attribute or value does not exist Parameter name: msDS-ExpirePasswordsOnSmartCardOnlyAccounts
Cause
This issue occurs when the schema version of the domain has not yet been updated.
Workaround
To work around this issue, use one of the following tools to obtain the properties of a domain object:
-
DSA.msc
-
Ldifde.exe
-
Ldp.exe
-
ADSI Edit (adsiedit.msc)
-
Get-ADObject cmdlet
