What does Windows error code 1314 (ERROR_PRIVILEGE_NOT_HELD) mean?

ERROR_PRIVILEGE_NOT_HELD

ERROR_PRIVILEGE_NOT_HELD (1314, 0x00000522) means that the access token performing an operation does not have a privilege that Windows requires for that operation. A privilege is separate from normal object permissions such as an ACL entry.

The effective token matters

A process normally uses its primary token, but a thread that is impersonating a client uses an impersonation token for security checks. Enabling a privilege on the wrong token does not help: the privilege must be present and enabled on the token that actually performs the protected operation.

What to check

• Identify the exact privilege required by the API, such as SeRestorePrivilege, SeBackupPrivilege, or SeSecurityPrivilege.
• Inspect the effective process or thread token and confirm that the privilege is both assigned and enabled.
• Use AdjustTokenPrivileges only to enable a privilege already present in that token; it cannot add a missing privilege.
• For services that impersonate clients, decide explicitly whether the protected work should run as the client or revert to the service identity before it is performed.

See Microsoft documentation about access tokens, enabling and disabling privileges, and AdjustTokenPrivileges.