| Previous | Next |
| STATUS_NO_SUCH_PRIVILEGE | STATUS_INVALID_ACCOUNT_NAME |
STATUS_PRIVILEGE_NOT_HELD
The caller lacks the required token privilege
Windows privileges are evaluated from the caller access token. This status means the requested operation is privileged and the token does not provide the needed right in the required state.
It should not be treated as an ACL-only failure. The object DACL can allow access while the operation still fails because the token lacks a privilege such as backup, restore, debug, security, or impersonation-related rights.
What to inspect
- Inspect the process or thread token and whether the privilege is present and enabled.
- Check group policy and local security policy if a service account is expected to have the right.
- Avoid granting broad administrator rights when a specific privilege assignment is the real missing piece.
References
- Microsoft: Access tokens
- Microsoft: Configure security policy settings
- Microsoft: Windows security model for driver developers
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.