PRB: Error 0xC0000187L When Using LSA APIs
Article ID: 199202
Article Last Modified on 11/21/2006
APPLIES TO
- Microsoft Win32 Application Programming Interface, when used with:
- Microsoft Windows NT 3.51 Service Pack 5
- Microsoft Windows XP Professional
This article was previously published under Q199202
SYMPTOMS
When you modify the Security Accounts Manager (SAM) database through the LSA APIs, you might get error code 0xC0000187L (STATUS_BACKUP_CONTROLLER). This error code means that the operation cannot be performed on a Backup Domain Controller (BDC).
0xC0000187L is defined in NTStatus.h included with the DDK. You can use
the LsaNtStatusToWinError() API to convert the LSA error codes to Win32 error codes.
CAUSE
This error occurs when you try to modify the SAM database on a BDC through LSA API such as LsaOpenPolicy().
STATUS
This behavior is by design.
MORE INFORMATION
The SAM database on a BDC is a replicated copy of the SAM database on the Primary Domain Controller (PDC). The correct procedure is to modify the Accounts database on the PDC and then allow the database to replicate to the BDCs.
You can call NetGetDCName() to get the PDC name.
Keywords: kbapi kbkernbase kbsecurity kblsa kbprb KB199202