| Previous | Next |
| STATUS_NO_SUCH_ALIAS | STATUS_MEMBER_IN_ALIAS |
STATUS_MEMBER_NOT_IN_ALIAS
No matching local-group membership exists to remove
SAM aliases correspond to local or domain-local groups and can contain SIDs from multiple trusted domains. Their membership is distinct from domain-group membership. A similarly named group or indirect membership does not satisfy a request to remove a direct alias member.
Enumerate the alias members as SIDs and resolve names only for display. If effective access remains after removing another path, inspect nested groups and ACLs; this status only describes the direct alias membership requested.
What to inspect
- Verify the target object is an alias/local group, not a domain group.
- Enumerate direct alias-member SIDs before removal.
- Trace indirect membership separately when the goal is effective-access removal.
References
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft: NetLocalGroupDelMembers
- Microsoft: LsaLookupNames2
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.