| Previous | Next |
| STATUS_MEMBER_NOT_IN_ALIAS | STATUS_ALIAS_EXISTS |
STATUS_MEMBER_IN_ALIAS
The local group already contains this direct member
Adding a member to a SAM alias is set-based and does not create duplicate entries. Because aliases can contain foreign-domain SIDs, the same principal should be compared by SID rather than by a possibly ambiguous or renamed account name.
An idempotent provisioning tool can accept the result after confirming the target alias and member SIDs. It should not assume that matching text names identify the same principal or that indirect membership is equivalent to this direct entry.
What to inspect
- Resolve and compare the member SID and alias SID.
- Confirm the entry is direct membership in the intended account store.
- Record the existing state as success only when it matches the desired identity.
References
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft: NetLocalGroupAddMembers
- Microsoft: LsaLookupNames2
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.