What does Windows error code 1351 (ERROR_CANT_ACCESS_DOMAIN_INFO) mean?

ERROR_CANT_ACCESS_DOMAIN_INFO

The security operation could not query required domain information

SAMR domain objects expose policy and domain attributes through query operations. ERROR_CANT_ACCESS_DOMAIN_INFO means the requested security workflow could not obtain the domain configuration it needed; the Win32 description explicitly allows either an unavailable machine or denied access. That is more specific than ERROR_NO_SUCH_DOMAIN, which reports that the domain itself does not exist or cannot be contacted as the requested domain.

Capture the target domain controller, credentials and the domain-information query immediately preceding the error. Test reachability and authorization separately. If the caller can open the domain but cannot read the required information class, investigate access rights; if no DC can be reached, diagnose discovery and transport instead of changing account permissions.

What to inspect

• Record which domain-information operation failed and which DC answered the request.
• Separate transport/DC availability from access-check failure.
• Do not create a replacement domain or account object to work around an unreadable domain policy.

References

• MS-SAMR: domain fields
• MS-SAMR: methods and sequencing rules