| Previous | Next |
| STATUS_ACCOUNT_RESTRICTION | STATUS_INVALID_WORKSTATION |
STATUS_INVALID_LOGON_HOURS
Account logon-hour policy blocks the session
This is a policy restriction on when the account may authenticate. The credentials may be correct and the account may be valid, but the current time is outside the permitted logon-hours window.
Time-zone conversion and domain-controller time are important: the observed local time on the client is not always the policy time used by the authenticating authority.
What to inspect
- Check the account logon-hours setting in the domain or local account policy.
- Verify client, domain-controller, and time-zone consistency.
- Do not reset passwords or repair trusts before confirming the time restriction.
References
- Microsoft: Configure security policy settings
- Microsoft: Allow log on locally policy
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.