| Previous | Next |
| STATUS_NOT_A_DIRECTORY | STATUS_LOGON_SESSION_COLLISION |
STATUS_BAD_LOGON_SESSION_STATE
The LSA session state does not match the requested action
This result distinguishes a stale or missing session from a live session that is in the wrong lifecycle state. The identifier resolves, but the operation is not valid for the current LSA session state.
Diagnose the sequence: creation, token generation, credential association, reference cleanup, and logoff. A state-ordering error can produce this even when the account is valid.
What to inspect
- Capture the previous authentication package call that changed the session state.
- Check retries and error recovery after partial logon failure.
- Do not replace this with a generic account or password diagnosis.
References
- Microsoft: Access tokens
- Microsoft: Kerberos authentication troubleshooting guidance
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.