On 32-bit Windows 10, use a custom SSP/AP, return STATUS_ACCOUNT_RESTRICTION(0xC000006E) RRS feed

  • Question

  •       On 32-bit Windows 10, use a custom SSP/AP to log in. The custom SSP/AP implements LsaApLogonUserEx2. From the log of the login process, LsaApLogonUserEx2 returns the correct result, But in ICredentialProviderCredential :: ReportResult, the return value is: ntsStatus = 0xC000006E, ntsSubstatus = 0.

        But 64-bit Windows 10 and 64-bit Windows 7 both work normally and can log in successfully.

        Who has relevant experience, please help me, thank you very much!
    Friday, January 17, 2020 9:41 AM


  • Hello gz xzb true,

    We may need more information for troubleshooting:

    1. Does your custom SSP/AP use Kerberos or NTLM procotol?
    2. What's the logon type? Is a local user or domain user?
    3. Is the custom SSP/AP DLL 32-bit or 64-bit?
    4. STATUS_ACCOUNT_RESTRICTION error indicates a referenced user name and authentication information are valid, but some user account restriction has prevented successful authentication (such as time-of-day restrictions). So is there any difference of the user credential and system environment between 32-bit and 64-bit machine?
    5. Check Event Viewer to see if there is logon failure event. Example as below:

    Make sure hide your private information when showing snapshot or logs.

    Best regards,


    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    • Marked as answer by gz xzb true Thursday, April 2, 2020 7:22 AM
    Saturday, January 18, 2020 6:25 AM