| Previous | Next |
| ERROR_DS_UNDELETE_SAM_VALIDATION_FAILED | ERROR_DS_SPN_VALUE_NOT_UNIQUE_IN_FOREST |
ERROR_INCORRECT_ACCOUNT_TYPE
The system is not authoritative for the specified account and therefore cannot complete the operation. Please retry the operation using the provider associated with this account. If this is an online provider please use the provider's online site.
ERROR_INCORRECT_ACCOUNT_TYPE is a domain-specific Windows result.
Likely impact: Local retries or privilege elevation cannot make the wrong provider authoritative.
Typical causes
- a cloud account is sent to local SAM APIs.
- a domain account is treated as a local account.
- provider metadata is stale.
- the UI hides which identity provider owns the account.
Troubleshooting steps
- Verify that the request is handled by the provider that owns the account identity and credentials.
- Collect account SID, UPN, and provider identifier and local, domain, or online account classification.
Useful evidence
- Collect provider discovery result.
- Collect sign-in and provisioning history.
Recovery and retry
Redirect the operation to the authoritative local, domain, or online provider and preserve the original account identity.
Related errors
ERROR_NO_SECRETS says the local store lacks secret material; this code explicitly says the system is not authoritative for the account
Example
A password-management tool sends an online account to a local change-password API. Detecting provider ownership sends the user to the online provider instead.
References
Looking for a different code? Search another status or error code.