| Previous | Next |
| ERROR_BAD_IMPERSONATION_LEVEL | ERROR_BAD_VALIDATION_CLASS |
ERROR_CANT_OPEN_ANONYMOUS
ERROR_CANT_OPEN_ANONYMOUS (1347, 0x00000543) means that Windows refused to open a token whose impersonation level is anonymous. Anonymous tokens intentionally do not expose a usable client identity or permit client impersonation.
A documented OpenThreadToken result
OpenThreadToken specifically returns this error for an anonymous impersonation token. This is different from ERROR_NO_TOKEN: a token can exist, but its security level deliberately prevents the caller from opening and using it as a normal client token.
Correct response
- Determine whether the protocol permits the client to request a higher impersonation level.
- Design the server operation so that anonymous clients are either rejected, handled without client identity, or routed through a separate authorization path.
- Do not treat the process or service token as a transparent replacement for the anonymous client token.
- Close any token handle that was successfully opened in other paths; a failed anonymous-token open does not return a usable handle.
See Microsoft documentation for OpenThreadToken and impersonation levels.
Looking for a different code? Search another status or error code.