| Previous | Next |
| STATUS_SPECIAL_GROUP | STATUS_MEMBERS_PRIMARY_GROUP |
STATUS_SPECIAL_USER
Windows protects this special account from the requested change
Default accounts such as Administrator, Guest, and system-managed identities have special SIDs or recovery roles. Some operations that are valid for ordinary users are blocked to preserve boot, recovery, service, or administration behavior.
Identify the account by SID rather than localized name. Apply documented enable, disable, rename, password, or policy controls where supported, and avoid deleting or replacing a protected identity with a normal account that cannot assume the same security semantics.
What to inspect
- Resolve the account SID and determine its documented role.
- Check whether the desired property has a supported management policy.
- Test recovery and service dependencies before changing special-account state.
References
- Microsoft: Default Active Directory accounts
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft: NetUserDel
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.