| Previous | Next |
| ERROR_DS_THREAD_LIMIT_EXCEEDED | ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF |
ERROR_DS_NOT_CLOSEST
The Global catalog server is not in the closest site.
ERROR_DS_NOT_CLOSEST is Windows status 8588 (0x0000218C) associated with selection of a global catalog server outside the closest Active Directory site.
Likely impact: Authentication may succeed but directory searches incur avoidable latency and WAN dependency.
Typical causes
- site and subnet mapping is missing.
- no healthy GC exists in the local site.
- DNS locator records are stale.
- the application pins a remote GC.
Troubleshooting steps
- Verify that the chosen global catalog matches the client site or the caller explicitly accepts a remote site.
- Collect client IP and resolved site and subnet objects and site links.
Useful evidence
- Collect local GC health and locator records.
- Collect latency to selected server.
Recovery and retry
Correct subnet-to-site mapping or restore a local GC, then repeat server discovery without a stale pinned endpoint.
Related errors
ERROR_NO_SITENAME means the site cannot be determined; this code means a GC was found but it is not the closest
Example
A branch subnet is absent from Sites and Services, so discovery chooses a hub GC. Adding the subnet mapping causes clients to select the local-site GC.
References
Looking for a different code? Search another status or error code.