Network Management

"Could not obtain information about Windows NT group/user, error code 0x5" error in SolarWinds Platform Configuration Wizard

The Configuration Wizard fails with an error related to user credentials.

First published date

10/30/2026 9:55 PM

Last published date

10/30/2026 10:19 PM

Overview

When running the SolarWinds Configuration Wizard (CW), the wizard fails during database configuration or verification with a System.Data.SqlClient.SqlException stating that it cannot obtain information about the Windows domain account.

Product section

Orion Platform

Cause

  • Active Directory Access Denied (Error Code 0x5): SQL Server queries Active Directory to validate the Windows domain login or group token. Windows error 0x5 translates to Access is Denied. This occurs when the SQL Server Service Account lacks permission in Active Directory to read authorization and group membership attributes for the specified domain user or group.
  • SQL Server Service Account Misconfiguration: The SQL Server instance may be running under an outdated, unauthorized, or local service account unable to query the Active Directory domain.

Resolution

Step 1: Update Active Directory Permissions

  1. Log in to your Active Directory Domain Controller or open Active Directory Users and Computers (dsa.msc).
  2. Navigate to the Builtin container.
  3. Locate the Windows Authorization Access Group (WAAG).
  4. Open Properties > Members tab and click Add.

  5. Add the SQL Server Service Account (and/or the SolarWinds database admin domain account) to this group.

    Note: This grants the account rights to read the tokenGroupsGlobalAndUniversal attribute and query user group information in Active Directory.

    Step 2: Verify and Update the SQL Server Service Account

    1. On the SQL Server hosting the SolarWinds database, open SQL Server Configuration Manager.
    2. Select SQL Server Services.
    3. Right-click SQL Server (MSSQLSERVER) (or your specific named instance) and select Properties.
    4. In the Log On tab, ensure the service is configured with the correct Active Directory domain service account.

    5. If changing the account:

      • Enter the new service account credentials and click Apply.

      • Restart the SQL Server service when prompted or during an approved maintenance window.

        Step 3: Re-run Configuration Wizard