What does NTSTATUS 0xC000A089 (STATUS_INCORRECT_ACCOUNT_TYPE) mean?

 
Previous Next
STATUS_DS_OID_NOT_FOUND STATUS_HASH_NOT_SUPPORTED

STATUS_INCORRECT_ACCOUNT_TYPE

The request was sent to the wrong identity provider

Windows can use local SAM, Active Directory, Microsoft Entra or web-based sign-in providers, and application-specific account systems. An identifier can be valid while the component receiving the request is not the authority that owns it.

Determine the account’s provider before changing credentials or local group membership. Retrying against the same provider will not synchronize an externally managed identity. For online accounts, the authoritative recovery or management operation may have to occur at the provider.

What to inspect

  • Record the account identifier, sign-in provider, tenant or domain, and device join state.
  • Distinguish local, domain, and online account objects that share a similar display name.
  • Route the operation to the provider that issued the account and then refresh local cached identity state.

References


Looking for a different code? Search another status or error code.