HRESULT 0x80090350 (SEC_E_DOWNGRADE

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The system cannot contact a domain controller to service the authentication request. Please try again later.

Previous	Next
SEC_E_CERT_WRONG_USAGE	SEC_E_SMARTCARD_CERT_REVOKED

SEC_E_DOWNGRADE_DETECTED

SEC_E_DOWNGRADE_DETECTED signals this condition: The system could not contact a domain controller to service the authentication request. This status is commonly surfaced when the required domain authentication path is unavailable. Treat it as a domain-controller discovery, DNS, network, or trust-path investigation before changing credentials.

What to check

Verify the active adapter, DNS servers, and ability to resolve domain-controller records.
Check the client and domain-controller events for Netlogon, Kerberos, and trust failures.
Confirm time synchronization because Kerberos is sensitive to client and domain-controller clock differences.

ipconfig /all

nltest /dsgetdc:contoso.com

Microsoft: SSPI status codes

Microsoft: Kerberos authentication troubleshooting

Looking for a different code? Search another status or error code.