What does NTSTATUS 0xC000010B (STATUS_INVALID_LOGON_TYPE) mean?

STATUS_INVALID_LOGON_TYPE

The requested logon type is not a valid value for this authentication call

STATUS_INVALID_LOGON_TYPE reports an invalid LogonType value in the authentication path. The meaning is not limited to Task Scheduler's Principal.LogonType; native logon APIs and security packages also carry logon-type semantics.

What to verify

• Capture the API or LSA/security-package call, numeric logon type, authentication package, token goal, and caller context.
• Distinguish an invalid enum/value from a valid logon type that policy forbids; the latter is a different authorization problem.
• Check marshaling boundaries and versioned structures if the numeric value is unexpected, especially across service, RPC, or custom authentication code.

Recovery boundary

Use a logon type supported by the exact API and intended credential flow. Changing account passwords or network settings cannot repair an invalid enum supplied by the caller.

References

• Microsoft Open Specifications: NTSTATUS values
• Microsoft: Using NTSTATUS values