| Previous | Next |
| STATUS_SPECIAL_USER | STATUS_FILE_CLOSED |
STATUS_MEMBERS_PRIMARY_GROUP
Primary-group references prevent the membership change
Primary-group identity is stored separately from ordinary group membership. Removing a user from the group or deleting the group while that reference remains would leave an invalid account relationship, even if the ordinary member list appears empty.
Enumerate accounts whose primaryGroupID or equivalent SAM attribute points to the group, assign each a valid replacement primary group, and then retry the membership or deletion operation. Do not merely remove visible direct memberships.
What to inspect
- Find every account whose primary-group reference resolves to this group SID or RID.
- Assign and verify an appropriate replacement primary group.
- Repeat deletion only after both direct membership and primary-group references are clear.
References
- Microsoft: Primary group in a security descriptor
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft Open Specifications: SAM server model
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.