| Previous | Next |
| STATUS_INVALID_LOGON_HOURS | STATUS_PASSWORD_EXPIRED |
STATUS_INVALID_WORKSTATION
Workstation restrictions block the logon
This status points to the account restriction that limits which computers may be used for logon. It is a policy and directory-attribute problem, not a generic network connectivity failure.
The same credentials can succeed from an allowed workstation and fail from another computer by design. Capture the client computer name used by the authentication package.
What to inspect
- Check the account workstation restrictions and the name format used by the domain controller.
- Verify whether the request came through RDP, service logon, network logon, or interactive logon.
- Confirm name resolution and domain join state only after the policy restriction is understood.
References
- Microsoft: Configure security policy settings
- Microsoft: Kerberos authentication troubleshooting guidance
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.