| Previous | Next |
| ERROR_SPECIAL_ACCOUNT | ERROR_SPECIAL_USER |
ERROR_SPECIAL_GROUP
A built-in special group rejected a generic group-management operation
Built-in Windows groups use well-known SIDs and can have operating-system-defined authorization roles. ERROR_SPECIAL_GROUP indicates that the target group is not an ordinary mutable group for the requested operation. This is different from ERROR_GROUP_EXISTS or ERROR_NO_SUCH_GROUP: the group is real, but the operation conflicts with its special status.
Record the group SID, group object type and operation before changing automation. A local alias and a domain group can have different management methods, and built-in principals should not be identified by English display names because names can be localized. If the goal is to grant or revoke access, modify supported membership or policy surfaces rather than trying to replace the built-in group object.
What to inspect
- Resolve the target group to its SID and object type.
- Check whether the requested action is delete, rename, or another protected modification.
- Manage allowed membership/policy instead of recreating a same-named group.
References
Looking for a different code? Search another status or error code.