| Previous | Next |
| ERROR_NO_SUCH_USER | ERROR_NO_SUCH_GROUP |
ERROR_GROUP_EXISTS
Global-group creation found an existing group object
The SAM model distinguishes group objects from aliases, which are the local-group object type. NetGroupAdd and SamrCreateGroupInDomain create a group in the selected account domain. ERROR_GROUP_EXISTS reports a collision in that create path; it should not be conflated with ERROR_ALIAS_EXISTS, which concerns a local alias object and a different membership API.
Query the existing group before deciding that provisioning succeeded. Compare the authority, RID/SID and intended membership model. A group with the right display name in another domain, or a local group with a similar name, does not satisfy the create request. As with users, deleting and recreating a security group changes its SID and can break permissions that reference the original object.
What to inspect
- Confirm whether the caller intended a SAM group or a local alias.
- Open the existing object in the same domain and compare its SID and attributes.
- Use membership/update operations for an accepted existing group instead of retrying creation.
References
Looking for a different code? Search another status or error code.