Edit

Security Management Return Values

  • Article

The security management return values include the following:

Attachment Return Values

The Security Configuration tool set supports the following SCESTATUS return codes. These values are returned by the attachment support functions and those functions implemented when writing an attachment engine or snap-in.

Value Description
SCESTATUS_SUCCESS The function succeeded.
SCESTATUS_INVALID_PARAMETER One of the parameters passed to the function was not valid.
SCESTATUS_RECORD_NOT_FOUND The specified record was not found in the security database.
SCESTATUS_INVALID_DATA The function failed because some data was not valid.
SCESTATUS_OBJECT_EXISTS The object already exists.
SCESTATUS_BUFFER_TOO_SMALL The buffer passed into the function to receive data is not large enough to receive all the data.
SCESTATUS_PROFILE_NOT_FOUND The specified profile was not found.
SCESTATUS_BAD_FORMAT The format is not valid.
SCESTATUS_NOT_ENOUGH_RESOURCE There is insufficient memory.
SCESTATUS_ACCESS_DENIED The caller does not have sufficient privileges to complete this action.
SCESTATUS_CANT_DELETE The function cannot delete the specified item.
SCESTATUS_PREFIX_OVERFLOW A prefix overflow occurred.
SCESTATUS_OTHER_ERROR An unspecified error has occurred.
SCESTATUS_ALREADY_RUNNING The service is already running.
SCESTATUS_SERVICE_NOT_SUPPORT The specified service is not supported.
SCESTATUS_MOD_NOT_FOUND An attachment engine DLL listed in the registry either cannot be found or cannot be loaded.
SCESTATUS_EXCEPTION_IN_SERVER An exception occurred in the server.

LSA Policy Function Return Values

Most Local Security Authority (LSA) Policy functions return an NTSTATUS value to indicate success or failure. The various NTSTATUS values are defined in Ntstatus.h, which is distributed with the Microsoft Windows Driver Development Kit (DDK).

To convert an NTSTATUS return value to a Windows error code, use the LsaNtStatusToWinError function.

The following table lists the NTSTATUS values that might be returned by any LSA function. (The return value sections for some of the LSA functions list additional error codes that the function might return.) This table also lists the Windows error code that corresponds to each NTSTATUS value.

NTSTATUS code (Windows error code) Meaning
STATUS_SUCCESS (ERROR_SUCCESS)
 The function was successful.
STATUS_ACCESS_DENIED (ERROR_ACCESS_DENIED)
 Caller does not have the appropriate access to complete the operation.
STATUS_INSUFFICIENT_RESOURCES (ERROR_NO_SYSTEM_RESOURCES)
 There are not enough system resources (such as memory to allocate buffers) to complete the call.
STATUS_INTERNAL_DB_ERROR (ERROR_INTERNAL_DB_ERROR)
 The LSA database contains an internal inconsistency.
STATUS_INVALID_HANDLE (ERROR_INVALID_HANDLE)
 Indicates an object or RPC handle is not valid in the context used.
STATUS_INVALID_SERVER_STATE (ERROR_INVALID_SERVER_STATE)
 Indicates the LSA server is currently disabled.
STATUS_INVALID_PARAMETER (ERROR_INVALID_PARAMETER)
 One of the parameters is not valid.
STATUS_NO_SUCH_PRIVILEGE (ERROR_NO_SUCH_PRIVILEGE)
 Indicates a specified privilege does not exist.
STATUS_OBJECT_NAME_NOT_FOUND (ERROR_FILE_NOT_FOUND)
 An object in the LSA policy database was not found. The object may have been specified either by SID or by name, depending on its type.
STATUS_UNSUCCESSFUL (ERROR_GEN_FAILURE)
 Generic failure, such as RPC connection failure.