| Previous | Next |
| STATUS_NO_TRACKING_SERVICE | STATUS_DS_NO_ATTRIBUTE_OR_VALUE |
STATUS_SERVER_SID_MISMATCH
The service identity does not match the trusted server SID
Some client/server contracts bind a service endpoint to a particular principal. This status indicates that the process behind the endpoint authenticated as a different SID. It can expose a service-account change, an incorrectly registered endpoint, or a connection redirected to the wrong instance.
Do not bypass the comparison by accepting any local administrator or service account. Verify the process token, service configuration, and endpoint ownership. In clustered or multi-instance deployments, confirm that each advertised name is mapped to the intended service identity.
What to inspect
- Record the expected SID and the SID from the authenticated server token.
- Map both SIDs to authoritative account names while retaining the raw SID values.
- Check service-account changes, endpoint registration, and name redirection before restarting clients.
References
- Microsoft: Security Identifiers API
- Microsoft: Security identifiers in Active Directory
- Microsoft Open Specifications: Netlogon Remote Protocol
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.