What does NTSTATUS 0xC00002E9 (STATUS_CURRENT_DOMAIN_NOT_ALLOWED) mean?

 
Previous Next
STATUS_MULTIPLE_FAULT_VIOLATION STATUS_CANNOT_MAKE

STATUS_CURRENT_DOMAIN_NOT_ALLOWED

This management action requires a different domain relationship

Trust and directory-management APIs often distinguish the local domain from an external, trusted, or target domain. An operation intended to create, remove, or modify a relationship cannot be applied to the current domain as though it were a remote authority.

Verify both ends of the operation and the direction of trust. Domain names can be canonicalized or resolved through aliases, causing two apparently different inputs to identify the same domain.

What to inspect

  • Resolve both domain names to SIDs and compare the resulting domain identifiers.
  • Record trust direction, trust type, and which side is local for the API call.
  • Use local domain-management operations for local settings instead of forcing a trust operation.

References


Looking for a different code? Search another status or error code.