| Previous | Next |
| STATUS_INVALID_ACCOUNT_NAME | STATUS_NO_SUCH_USER |
STATUS_USER_EXISTS
User creation collided with an existing account
Account stores enforce uniqueness for the naming and identity rules of the target domain. The existing object may be disabled, renamed elsewhere in the directory, or represented by a different display name, so checking only the local UI can miss it.
Resolve the account by SID and distinguished identity before deciding whether to update or delete it. Creation code should treat this as an idempotency case only when the existing object is proven to be the same managed account; reusing an unrelated user can transfer permissions unexpectedly.
What to inspect
- Query the target domain for the exact account name and SID.
- Compare immutable identity attributes with the provisioning record.
- Choose update, rename, or explicit conflict reporting instead of blind deletion.
References
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft Open Specifications: SAM server model
- Microsoft: NetUserAdd
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.