| Previous | Next |
| STATUS_CONNECTION_COUNT_LIMIT | STATUS_LOGIN_WKSTA_RESTRICTION |
STATUS_LOGIN_TIME_RESTRICTION
The account is outside its allowed logon hours
Active Directory can store a weekly logon-hours bitmap for an account. Authentication can therefore fail even when the password, workstation, and account state are otherwise valid. Time-zone conversion matters because administrative tools may display the schedule differently from its stored representation.
Do not reset the password to address this status. Compare the domain-controller time, client time, configured schedule, and the account’s effective policy. Emergency changes should be audited because widening logon hours changes an authorization control.
What to inspect
- Read the account logonHours attribute and convert it using the intended time zone.
- Verify domain time synchronization and daylight-saving assumptions.
- Review account-change audit events to determine when and by whom the schedule was modified.
References
- Microsoft: Set-ADUser
- Microsoft: account-change audit event 4738
- Microsoft: net user
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.