What does Windows error code 1387 (ERROR_NO_SUCH_MEMBER) mean?

 
Previous Next
ERROR_NT_CROSS_ENCRYPTION_REQUIRED ERROR_INVALID_MEMBER

ERROR_NO_SUCH_MEMBER

A local-group membership request could not resolve the member object

ERROR_NO_SUCH_MEMBER is different from ERROR_MEMBER_NOT_IN_ALIAS. The latter means a real principal is not currently in the local group; this code means the member object itself could not be found for the add or remove operation. NetLocalGroupAddMembers accepts existing user or global-group accounts, and SAMR alias membership is represented by member SIDs.

Resolve the supplied account to a SID before changing alias membership and verify the authority that performed the lookup. A deleted domain account can leave a SID visible in an existing local group even though a new name-based lookup fails. Conversely, an unqualified name can resolve against the wrong local SAM or domain. Do not create a same-named local user automatically to satisfy a missing domain member.

What to inspect

  • Resolve the member name and authority independently of the local-group operation.
  • Compare SIDs when an existing unresolved membership entry is present.
  • Avoid silently substituting a new local principal for a missing domain account.

References


Looking for a different code? Search another status or error code.