Windows error 8499 (ERROR_DS_CANT_MOVE_RESOURCE

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: A non-empty resource group cannot be moved across domain boundaries.

Previous	Next
ERROR_DS_CANT_MOVE_ACCOUNT_GROUP	ERROR_DS_INVALID_SEARCH_FLAG

ERROR_DS_CANT_MOVE_RESOURCE_GROUP

ERROR_DS_CANT_MOVE_RESOURCE_GROUP (8499) is an Active Directory Domain Services error. The directory service rejected a cross-domain move of a non-empty resource group because its membership and resource authorization context cannot be preserved by a direct move.

What to check

Document group scope, resource ACLs, nesting, and member identities before migrating.
Recreate a suitable group in the target domain and migrate access deliberately.
Test affected file, service, and application access before retiring the source group.

Useful command

Get-ADGroup -Identity "<Group>" -Properties GroupScope,GroupCategory

Microsoft: Understand Active Directory security groups · Microsoft: Move-ADObject · Microsoft: Directory Service system error codes

Looking for a different code? Search another status or error code.