| Previous | Next |
| STATUS_CTX_SHADOW_NOT_RUNNING | STATUS_CTX_SECURITY_LAYER_ERROR |
STATUS_CTX_LOGON_DISABLED
An interactive logon policy or account restriction blocked the session
STATUS_CTX_LOGON_DISABLED reports that interactive logon has been disabled for the request. It should be separated from password failures, RDS CAL availability, and network reachability: the account reached a logon-policy decision that disallows the requested interactive use.
The relevant evidence is the effective policy, account state, logon type, and target host. A successful test with an administrator account does not prove that the affected account should be granted the same interactive privileges.
Useful evidence
- Collect the user, target host, logon type, RDS collection or host policy, and the correlated security/RDS events.
- Review effective user-right assignments and account restrictions for the intended logon path, including any policy delivered by domain management.
- Apply the least-privilege correction that matches the required access path; do not bypass the restriction by changing unrelated RDP display or licensing settings.
References
- Microsoft Open Specifications: NTSTATUS values
- Microsoft: troubleshoot RDS access denied and authorization
- Microsoft: Remote Desktop Services overview
Looking for a different code? Search another status or error code.