Windows error 8553 (ERROR_DS_CANT_CREATE_IN_NONDOMAIN

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: Security principal objects can be created only in domain naming contexts.

Previous	Next
ERROR_DS_SOURCE_AUDITING_NOT_ENABLED	ERROR_DS_INVALID_NAME_FOR_SPN

ERROR_DS_CANT_CREATE_IN_NONDOMAIN_NC

ERROR_DS_CANT_CREATE_IN_NONDOMAIN_NC (8553) is an Active Directory Domain Services error. The request attempted to create a security principal, such as a user, group, computer, or service account, outside a domain naming context. Configuration, schema, and application partitions are not valid locations for normal security principals.

What to check

Verify the target DN and distinguish the default domain naming context from configuration, schema, and application partitions.
Create the principal under a suitable domain container or organizational unit.
Review provisioning scripts for hard-coded base DNs that may point at the wrong partition.

Useful command

Get-ADRootDSE | Select-Object defaultNamingContext,configurationNamingContext,schemaNamingContext

Microsoft: Directory Service system error codes · Microsoft: AD DS schema updates · Microsoft: Characteristics of AD attributes

Looking for a different code? Search another status or error code.