| Previous | Next |
| STATUS_POLICY_OBJECT_NOT_FOUND | STATUS_VOLUME_NOT_UPGRADED |
STATUS_POLICY_ONLY_IN_DS
The requested policy data exists only in the directory service
Windows security policy has local objects and, on domain systems, information backed by Active Directory. MS-LSAD explicitly distinguishes objects stored in local policy from Global Secrets and trusted-domain objects that can be stored in Active Directory on applicable server releases. This status tells the caller that the selected policy information belongs to the directory-service side.
Preserve the target machine role and domain context. A local policy handle is not a substitute for directory access, and copying local registry data cannot manufacture directory-backed state. Diagnose directory availability, the selected domain controller and the protocol/API used to request the object.
What to inspect
- Record whether the target is a domain controller, member server, or workstation.
- Identify the policy information class or object and the domain/DC selected for the request.
- Use the documented directory-backed operation rather than forcing a local-policy lookup.
References
- Microsoft Open Specifications: MS-LSAD product behavior
- Microsoft Open Specifications: LsarOpenPolicy2
- Microsoft: LsaOpenPolicy
Looking for a different code? Search another status or error code.