What does Windows error code 8487 (ERROR_DS_NOT_AUTHORITIVE_FOR_DST_NC) mean?

 
Previous Next
ERROR_DS_DST_NC_MISMATCH ERROR_DS_SRC_GUID_MISMATCH

ERROR_DS_NOT_AUTHORITIVE_FOR_DST_NC

The destination DC does not own the required writable NC replica

A DC can know about a naming context without hosting a full writable replica of it. Global catalog servers hold partial replicas of other domain NCs, and AD can also expose read-only replica states. Cross-domain move completion requires an authoritative destination for the target NC, not merely a server that can search objects from that partition.

This makes the status different from destination-unreachable errors. The contacted server answered but is the wrong replica type or wrong domain authority for the requested move. Client DC selection and stale crossRef information are more useful to inspect than local file permissions.

What to inspect

  • Identify the destination NC and verify which DCs hold full writable replicas of it.
  • Confirm the move is directed to a destination-domain DC rather than a GC selected only because it is nearby.
  • Check configuration-NC replication when the client and server disagree about which DC is authoritative for the destination partition.

References


Looking for a different code? Search another status or error code.