ERROR_DS_CANT_MOVE_APP_QUERY_GROUP - 8609 (0x21A1)
Cross-domain move of non-empty query based application groups is not allowed.
Updated: Feb 21, 2026
Technical Meaning
The error code ERROR_DS_CANT_MOVE_APP_QUERY_GROUP (8609, 0x21A1) indicates that a cross-domain move operation on non-empty query-based application groups is not allowed. This error typically occurs during operations involving directory service management.
Error Details
This specific error pertains to the inability to perform a cross-domain move of application groups that are defined based on queries. The term 'cross-domain' implies that the operation involves moving objects from one domain to another, which is restricted in this context due to the nature of the query-based application groups.
Usage Context
This error code is relevant when performing directory service operations, particularly those involving the management and movement of application groups within a multi-domain environment. It is important for developers and administrators to understand the implications of such operations, especially when dealing with complex domain structures.
Developer Interpretation
Developers should interpret this error as indicating that an attempt was made to move non-empty query-based application groups across different domains, which is not permitted by the system. This restriction ensures data integrity and consistency within the directory service architecture.
Related Errors
ERROR_DS_CANT_MOD_DSA_PROP(8605): Cannot modify DSA properties.ERROR_DS_CANT_REM_FROM_SYSTEM_CONTAINER(8612): Cannot remove from system container.
FAQ
Q: What does the error code 8609 mean?
A: The error code 8609, ERROR_DS_CANT_MOVE_APP_QUERY_GROUP, indicates that a cross-domain move operation on non-empty query-based application groups is not allowed.
Q: Can this error occur in single-domain environments?
A: No, this specific error relates to operations involving multiple domains. It will not typically occur in single-domain environments unless there are nested domain structures or similar complexities.
Summary
The ERROR_DS_CANT_MOVE_APP_QUERY_GROUP (8609) is a specific error code that restricts the cross-domain movement of non-empty query-based application groups, ensuring data integrity and consistency within directory service management. Developers should be aware of this restriction when designing operations involving multi-domain environments.