Skip to main content

Error: 4Domain Only Applies with Name

Needs dev input: remove before publishing

TODO: Confirm the value to pass to -Member when the local Administrators group contains a member with an incomplete name, such as DOMAIN\ with no account name. Evidence: none.

TODO: Screenshot ka04u00000116da_0EM4u000008LVoZ.png shows a lab domain name, domain SID, and user name; redact or re-capture it (TODO(screenshots)). Evidence: image.

Symptom​

The following error message is displayed in the upper-right corner of the Grant Access page:

4Domain only applies with name

Cause​

A member of the local Administrators group on the target system has incomplete data. To check, run the following PowerShell command on the system:

Get-LocalGroupMember -SID S-1-5-32-544 | ConvertTo-JSON

PowerShell output of Get-LocalGroupMember showing a member whose Name value is a domain name with no account name

In the output, the AccountDomainSid and Name values of the member are incomplete. In the example, the Name value is CONTOSO\, but the complete value must include an account, such as CONTOSO\svc-account. The incomplete member causes the product to receive incomplete data for a member of the local Administrators group.

Resolution​

  1. Confirm that the offending member is not needed in the local Administrators group.

  2. Remove the member from the group. Replace <member-name> with the Name value from the output:

    Remove-LocalGroupMember -Group Administrators -Member "<member-name>"

  3. Rescan the system. The scan must complete successfully.