| Previous | Next |
| STATUS_CANT_OPEN_ANONYMOUS | STATUS_BAD_TOKEN_TYPE |
STATUS_BAD_VALIDATION_CLASS
The requested logon validation format is not valid here
Authentication packages and Netlogon-style flows exchange specific validation structures describing the account, groups, session keys, and logon result. A class valid for one package, protocol version, or trusted-domain path might not be accepted by another.
Preserve the exact package name, logon type, validation class, and protocol negotiation. Do not cast the returned buffer to a preferred structure after failure. Version-gate optional classes and keep the package contract synchronized on both sides of a custom authentication integration.
What to inspect
- Log authentication package, logon type, validation class, and negotiated protocol version.
- Verify the class is supported by the selected package and call path.
- Validate returned buffer type and length before reading any fields.
References
- Microsoft: LsaLogonUser
- Microsoft Open Specifications: SAM Remote Protocol
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.