| Previous | Next |
| STATUS_NO_SUCH_GROUP | STATUS_MEMBER_NOT_IN_GROUP |
STATUS_MEMBER_IN_GROUP
The group already contains this member
SAM group membership is a set relationship, so adding the same member again does not create a second effective membership. Some operations also return this status when deletion of a group is blocked because it still contains members.
Treat an add as idempotent only after confirming the member SID and target group SID. For deletion, enumerate members and remove or migrate them according to policy rather than repeatedly issuing the delete. Nested and indirect membership should be distinguished from the direct membership modified by the API.
What to inspect
- Compare member and group SIDs, not only display names.
- Determine whether the operation was add-member or delete-group.
- Enumerate direct members before destructive group operations.
References
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft: NetGroupAddUser
- Microsoft: NetGroupDel
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.