| Previous | Next |
| ERROR_NO_LOGON_SERVERS | ERROR_NO_SUCH_PRIVILEGE |
ERROR_NO_SUCH_LOGON_SESSION
The requested AuthenticationId does not identify a live LSA logon session
A successful authentication creates an LSA logon session and tokens associated with that session carry its logon ID, represented as an LUID. The session ends when its lifetime is over and the authentication package is notified of termination. This error indicates that code attempted to query or operate on a session identifier that LSA cannot find, including a session that has already been torn down.
Capture the LUID and compare it with TokenStatistics.AuthenticationId or the logon-session enumeration source from which it was obtained. Do not persist a logon LUID across reboot: LUID uniqueness is local and allocation guarantees do not make the value a durable machine identity. Races are also possible if a diagnostic tool enumerates sessions and later queries each one while logoff is occurring. Handle disappearance as a lifecycle condition and distinguish it from access denied while reading a live session.
What to inspect
- Record the exact logon LUID and the token AuthenticationId that led to it.
- Check for concurrent logoff or token teardown between enumeration and lookup.
- Never treat a locally unique logon identifier as a durable identifier across reboot.
References
Looking for a different code? Search another status or error code.