| Previous | Next |
| ERROR_DS_INCOMPATIBLE_CONTROLS_USED | ERROR_DS_RESERVED_LINK_ID |
ERROR_DS_NO_REF_DOMAIN
Unable to find a valid security descriptor reference domain for this partition.
ERROR_DS_NO_REF_DOMAIN is Win32 error 8575 (0x0000217F).
Likely impact: ACL construction and principal resolution for the partition can fail or produce incomplete administrative results.
Typical causes
- partition metadata does not name a usable reference domain.
- the referenced domain is unavailable or removed.
- cross-forest trust or replication metadata is incomplete.
- the contacted DC lacks current partition metadata.
Troubleshooting steps
- Verify that the partition has an available and valid reference domain for resolving security principals.
- Collect naming-context DN and partition object and reference-domain metadata.
Useful evidence
- Collect replication status for configuration partition.
- Collect security descriptor and unresolved SIDs.
Recovery and retry
Repair or replicate the partition and trust metadata so a valid reference domain can be selected, then repeat the security operation.
Related errors
ERROR_DS_MISSING_FOREST_TRUST concerns an absent forest trust; this code concerns the reference domain used by one partition
Example
A newly restored application partition exists on one DC but its crossRef metadata has not converged. Replicating the Configuration partition restores the reference-domain mapping.
References
Looking for a different code? Search another status or error code.