| Previous | Next |
| SEC_E_NOTRUSTEEID | SEC_E_INVALIDOBJECT |
SEC_E_NOMEMBERSHIPSUPPORT
Meaning
Windows documents SEC_E_NOMEMBERSHIPSUPPORT as “Trustee does not support memberships or collections”. In this case, membership or collection administration is requested for a trustee type that does not support that relationship.
Conditions that specifically lead to the result
- Cause 1: the trustee represents an individual object with no membership model.
- Cause 2: the provider security implementation omits group administration.
- Cause 3: the operation is applied to a special or external identity type.
Relevant contract
OLE DB security administration represents trustees, owners, groups, protected objects and access-entry lists as separate entities. A syntactically valid trustee can still be unknown to a provider, and an allowed permission set depends on the protected object type.
Investigation of this result should start with the provider security interface, effective data-source namespace and exact trustee or access-entry structure supplied.
Diagnostic sequence
- Identify the exact failing stage: membership or collection administration is requested for a trustee type that does not support that relationship.
Evidence to collect
- Evidence 1: trustee type and provider capabilities.
- Evidence 2: requested add, remove or enumeration operation.
- Evidence 3: available ITrusteeGroupAdmin or related interfaces.
Corrective actions
- Action 1: feature-detect membership support.
- Action 2: apply direct access entries when appropriate.
- Action 3: manage membership in the authoritative external directory instead.
Practical scenario
A data source accepts external certificate identities for access but cannot place them in provider groups; direct grants replace membership changes.
Retry and recovery
Retry rule: retry only with a trustee and provider that support memberships or with a different authorization design.
Difference from nearby HRESULT values
SEC_E_NOTRUSTEEID means the trustee is unknown, while SEC_E_NOMEMBERSHIPSUPPORT means it is known but has no supported membership contract.
Official Microsoft references
Looking for a different code? Search another status or error code.