| Previous | Next |
| STATUS_SPECIAL_ACCOUNT | STATUS_SPECIAL_USER |
STATUS_SPECIAL_GROUP
The target is a special group managed by Windows
Built-in groups have fixed roles, well-known SIDs, or lifecycle rules that differ from ordinary administrator-created groups. Renaming may be permitted in some contexts, but deletion or structural modification can be blocked because Windows components and policy refer to the stable identity.
Identify the group by SID and object class before deciding on an alternative. Modify membership or delegated rights through supported policy when appropriate; do not replace the group with a newly created object that merely has the same name.
What to inspect
- Resolve the group SID and check whether it is well-known or built-in.
- Determine which specific operation is restricted.
- Use supported membership or policy changes instead of recreating the group.
References
- Microsoft: Default Active Directory accounts
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft: NetGroupDel
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.