Rejoin the Domain: Open System Properties → Change → set to Workgroup → OK → Restart
👇 See all 2 solutions belowWhat is Error 8586?
Windows System Error Code 8586, known as ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE_V2, is a Active Directory error that occurs during Active Directory and directory services. The error indicates that: The directory cannot validate the proposed naming context (or partition) name because it does not hold a replica nor can it contact a replica of the naming context above the proposed naming context. When this error is encountered, the Windows operating system was unable to complete the requested operation within the directory services subsystem. The error code 8586 is returned by the GetLastError() function and provides developers with a specific identifier to diagnose the root cause of the failure. The symbolic name ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE_V2 maps directly to this numeric code and is commonly referenced in Microsoft documentation, developer forums, and system logs. Understanding this error and its context within Active Directory and directory services is essential for effective troubleshooting.
Common Causes
- System resource conflict: The directory cannot validate the proposed naming context (or partition) name because it does not hold a replica nor can it contact a replica of the naming context above the proposed naming context.
- Computer lost domain trust
- Time sync beyond Kerberos limit
- DNS preventing DC discovery
The Complete Windows Event Viewer Masterclass for Crash Investigation
A deep dive into parsing the Windows Event Viewer, filtering DCOM / Service Control Manager logs, and finding the true root cause of silent application crashes.
Read the full guide →Step-by-Step Solutions
- Open System Properties → Change → set to Workgroup → OK → Restart
- Then change back to Domain → enter domain name → OK → Restart
- This re-establishes the trust relationship
Video Tutorials
Diagnostic Command
Run this PowerShell command to find related events in your system log:
Get-EventLog -LogName System -Newest 20 | Where-Object {$_.Message -like "*8586*" -or $_.Message -like "*ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE_V2*"} | Format-List💡 Open PowerShell as Administrator, paste the command above, and press Enter.
Prevention Tips
- Ensure reliable NTP sources
- Monitor DC health with dcdiag
- Use redundant DNS servers