What does HRESULT 0x803D001F (WS_E_SERVER_REQUIRES_NEGOTIATE_AUTH) mean?

 
Previous Next
WS_E_SERVER_REQUIRES_NTLM_AUTH WS_E_INVALID_ENDPOINT_URL

WS_E_SERVER_REQUIRES_NEGOTIATE_AUTH

WS_E_SERVER_REQUIRES_NEGOTIATE_AUTH is a Windows Web Services API HRESULT. It means that the remote endpoint rejected the offered authentication scheme and requires HTTP Negotiate authentication, which can use Kerberos or NTLM.

What to check for WS_E_SERVER_REQUIRES_NEGOTIATE_AUTH

  • Verify endpoint SPNs, DNS names, domain trust and ticket availability for the client identity.
  • Confirm that the endpoint is trusted and matches the intended service principal.
  • Use authentication diagnostics to identify whether Kerberos or NTLM was selected and why.

Microsoft documentation

Diagnostic discriminator: Confirm that the endpoint is reachable and that its challenge selects Negotiate. Then inspect SPN, DNS and ticket state to distinguish Kerberos configuration from NTLM fallback rather than treating the result as transport failure.


Looking for a different code? Search another status or error code.