What does NTSTATUS 0xC000005F (STATUS_NO_SUCH_LOGON_SESSION) mean?

 
Previous Next
STATUS_NO_LOGON_SERVERS STATUS_NO_SUCH_PRIVILEGE

STATUS_NO_SUCH_LOGON_SESSION

The LSA logon session identifier is stale

This status means the identifier no longer maps to a live Local Security Authority logon session. It is a lifetime problem around logon-session state, not proof that the user account itself is invalid.

It often appears when cached authentication state is used after logoff, service restart, token cleanup, or a credential-provider/session transition. Preserve the LUID/session identifier and the operation that attempted to reuse it.

What to inspect

  • Correlate logon, logoff, service restart, and token duplication events.
  • Do not confuse this with a password or account-lockout failure.
  • Check whether the caller retained a token or LUID beyond the session lifetime.

References


Looking for a different code? Search another status or error code.