Rejoin the Domain: Open System Properties → Change → set to Workgroup → OK → Restart
👇 See all 2 solutions below
What is Error 8505?
Windows System Error Code 8505, known as ERROR_DS_SENSITIVE_GROUP_VIOLATION, is a Active Directory error that occurs during Active Directory and directory services. The error indicates that: Only an administrator can modify the membership list of an administrative group. When this error is encountered, the Windows operating system was unable to complete the requested operation within the directory services subsystem. The error code 8505 is returned by the GetLastError() function and provides developers with a specific identifier to diagnose the root cause of the failure. The symbolic name ERROR_DS_SENSITIVE_GROUP_VIOLATION maps directly to this numeric code and is commonly referenced in Microsoft documentation, developer forums, and system logs. Understanding this error and its context within Active Directory and directory services is essential for effective troubleshooting.
Common Causes
- System resource conflict: Only an administrator can modify the membership list of an administrative group.
- Computer lost domain trust
- Time sync beyond Kerberos limit
- DNS preventing DC discovery
Resolving Device Driver Failures: Code 43, PnP Watchdog, and DDU
An encyclopedia on mastering Windows Device Manager, resolving generic Code 43 GPU faults, and executing flawless driver sweeps with DDU.
Read the full guide →Step-by-Step Solutions
- Open System Properties → Change → set to Workgroup → OK → Restart
- Then change back to Domain → enter domain name → OK → Restart
- This re-establishes the trust relationship
Video Tutorials
Diagnostic Command
Run this PowerShell command to find related events in your system log:
Get-EventLog -LogName System -Newest 20 | Where-Object {$_.Message -like "*8505*" -or $_.Message -like "*ERROR_DS_SENSITIVE_GROUP_VIOLATION*"} | Format-List
💡 Open PowerShell as Administrator, paste the command above, and press Enter.
Prevention Tips
- Ensure reliable NTP sources
- Monitor DC health with dcdiag
- Use redundant DNS servers