What does NTSTATUS 0xC000010B (STATUS_INVALID_LOGON_TYPE) mean?

 
Previous Next
STATUS_PROCESS_IS_TERMINATING STATUS_NO_GUID_TRANSLATION

STATUS_INVALID_LOGON_TYPE

Meaning and context of STATUS_INVALID_LOGON_TYPE

The LogonType element and the UserId element are used together to define the user required to run those tasks that use this principal.

For scripting development, the logon type for the principal is specified by the Principal.LogonType property.

For C++ development, the logon type for the principal is specified by the IPrincipal::LogonType property.

This element (defined by the logonType simple type) must have one of the following values.

  • S4U: User must log on using a service for user (S4U) logon. When an S4U logon is used, no password is stored by the system and there is no access to the network or encrypted files.
  • Password: User must log on using a password.

For a task, that contains a message box action, the message box will be displayed if the task is activated and the task has an interactive logon type. To set the task logon type to be interactive, specify InteractiveToken in the <LogonType> element of the task principal.

Native status interpretation

STATUS_INVALID_LOGON_TYPE is 0xC000010B, an NTSTATUS error value. AllStat describes it as “Indicates an invalid value has been provided for the LogonType requested.”. The first useful question is which native API, IRP, protocol operation, or subsystem in the kernel, native API, or subsystem that returned the status produced that status.

Debugging sequence

  • Preserve this result before RtlNtStatusToDosError, HRESULT conversion, exception translation, or provider-specific remapping removes information.
  • Correlate this result with ETW, Event Viewer, protocol traces, or a dump from the component that owns logon / type; do not diagnose from translated text alone.
  • For kernel I/O, keep the device stack, IRP major/minor function, request parameters, completion routine, and the first component that completed the request with this result.

Recovery considerations

A retry is appropriate only after the owner of this result has changed the state described by “Indicates an invalid value has been provided for the LogonType requested.”, or when its contract explicitly marks the status as transient. If the value reports corruption, invalid format, access policy, or a lifecycle mismatch, preserve evidence and correct that cause before repeating the request.

Official references


Looking for a different code? Search another status or error code.