| Previous | Next |
| SEC_E_NO_IMPERSONATION | SEC_E_UNKNOWN_CREDENTIALS |
SEC_E_LOGON_DENIED
SEC_E_LOGON_DENIED signals this condition: The authentication attempt was denied. This is a high-level sign-in failure. It does not by itself distinguish wrong credentials from account restrictions, certificate mapping problems, Kerberos policy, or a target-side access decision.
What to check
- Correlate the client error with Security and System events on the target server and domain controller.
- Identify the protocol that was actually used: Kerberos, NTLM, CredSSP, smart card, or another SSPI package.
- Find the first specific error in the authentication sequence before changing credentials or account settings.
Microsoft: InitializeSecurityContext
Microsoft: Kerberos authentication troubleshooting
Looking for a different code? Search another status or error code.