| Previous | Next |
| STATUS_PIPE_EMPTY | STATUS_CANT_TERMINATE_SELF |
STATUS_CANT_ACCESS_DOMAIN_INFO
The client cannot obtain authoritative domain information
Domain operations often begin by locating a controller and querying domain policy or account data. This status combines two materially different paths: no usable controller can be contacted, or a controller responds but the caller lacks access to the requested information.
Separate discovery, transport, secure-channel, and authorization checks. A successful DNS lookup alone does not prove that Netlogon, LDAP, RPC, or the machine secure channel works. Conversely, changing firewall rules will not repair a denied directory query.
What to inspect
- Run DC Locator for the exact domain and site and retain the selected controller.
- Verify DNS SRV records, time synchronization, RPC connectivity, and the machine secure channel.
- Audit the directory operation and caller token to distinguish network failure from access denial.
References
- Microsoft: Domain controller locator
- Microsoft: Verify domain-controller SRV records
- Microsoft Open Specifications: Netlogon Remote Protocol
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.