| Previous | Next |
| STATUS_MULTIPLE_FAULT_VIOLATION | STATUS_CANNOT_MAKE |
STATUS_CURRENT_DOMAIN_NOT_ALLOWED
This management action requires a different domain relationship
Trust and directory-management APIs often distinguish the local domain from an external, trusted, or target domain. An operation intended to create, remove, or modify a relationship cannot be applied to the current domain as though it were a remote authority.
Verify both ends of the operation and the direction of trust. Domain names can be canonicalized or resolved through aliases, causing two apparently different inputs to identify the same domain.
What to inspect
- Resolve both domain names to SIDs and compare the resulting domain identifiers.
- Record trust direction, trust type, and which side is local for the API call.
- Use local domain-management operations for local settings instead of forcing a trust operation.
References
- Microsoft Open Specifications: Netlogon Remote Protocol
- Samba: Active Directory trusts
- Microsoft: Security identifiers in Active Directory
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.