What does Windows error code 8535 (ERROR_DS_DESTINATION_DOMAIN_NOT_IN_FOREST) mean?

 
Previous Next
ERROR_DS_SOURCE_DOMAIN_IN_FOREST ERROR_DS_DESTINATION_AUDITING_NOT_ENABLED

ERROR_DS_DESTINATION_DOMAIN_NOT_IN_FOREST

The target domain is outside the operation’s forest boundary

An in-forest cross-domain move relies on shared schema, configuration, trust, and directory metadata. The destination must be another domain in the same forest. If the target name resolves to a domain in a different forest—or to a stale or incorrectly configured trust target—the operation cannot preserve the object through the coordinated move protocol.

Resolve the target domain through the configuration naming context and confirm its forest root, domain SID, and target DC identity. Distinguish a move from an inter-forest migration: the latter creates or maps a new principal and may preserve access using SID history, rather than moving the same object. Verify DNS and DC discovery so the target hostname does not accidentally select a similarly named external domain.

What to inspect

  • Compare source and target forest-root identities.
  • Verify the target DC hosts the intended destination domain.
  • Use migration tooling rather than cross-domain move for another forest.

References


Looking for a different code? Search another status or error code.