| Previous | Next |
| STATUS_UNEXPECTED_MM_EXTEND_ERR | STATUS_LOGON_SESSION_EXISTS |
STATUS_NOT_LOGON_PROCESS
The caller is not an LSA logon process
Some LSA operations are restricted to trusted logon processes registered with the Local Security Authority. This status means the caller is outside that trusted path.
It is not an ordinary access-token privilege failure. The process identity, LSA registration path, and authentication package boundary are part of the contract.
What to inspect
- Identify whether the process should be an LSA authentication package, credential provider helper, or ordinary application.
- Do not attempt to bypass the restriction by only adding privileges to the account.
- Check service isolation and whether code moved from a trusted component into a normal user-mode process.
References
- Microsoft: Access tokens
- Microsoft: Kerberos authentication troubleshooting guidance
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.