What does NTSTATUS 0xC000010D (STATUS_CANNOT_IMPERSONATE) mean?

STATUS_CANNOT_IMPERSONATE

The server cannot impersonate the named-pipe client yet

Check whether the pipe has a connected client and whether the server performed an operation that establishes an impersonation context. Impersonation requires the correct pipe state and security negotiation, not only a valid server handle.

Named-pipe impersonation uses the security context of the last message read from the client. If the server has not read a client message on that pipe, there is no client token context for the pipe file system to apply.

What to inspect

• Read a client request before calling ImpersonateNamedPipeClient.
• Confirm the handle is the server end of the pipe.
• Check the client impersonation level if impersonation still fails after a read.

References for STATUS_CANNOT_IMPERSONATE

• Microsoft Open Specifications: NTSTATUS values
• Microsoft: ImpersonateNamedPipeClient
• Microsoft: Named Pipes