Skip to main content
Security Management Return Values

The security management return values include the following:

Attachment Return Values

The Security Configuration tool set supports the following SCESTATUS return codes. These values are returned by the attachment support functions and those functions implemented when writing an attachment engine or snap-in.

SCESTATUS_SUCCESSThe function succeeded.
SCESTATUS_INVALID_PARAMETEROne of the parameters passed to the function was not valid.
SCESTATUS_RECORD_NOT_FOUNDThe specified record was not found in the security database.
SCESTATUS_INVALID_DATAThe function failed because some data was not valid.
SCESTATUS_OBJECT_EXISTSThe object already exists.
SCESTATUS_BUFFER_TOO_SMALLThe buffer passed into the function to receive data is not large enough to receive all the data.
SCESTATUS_PROFILE_NOT_FOUNDThe specified profile was not found.
SCESTATUS_BAD_FORMATThe format is not valid.
SCESTATUS_NOT_ENOUGH_RESOURCEThere is insufficient memory.
SCESTATUS_ACCESS_DENIEDThe caller does not have sufficient privileges to complete this action.
SCESTATUS_CANT_DELETEThe function cannot delete the specified item.
SCESTATUS_PREFIX_OVERFLOWA prefix overflow occurred.
SCESTATUS_OTHER_ERRORAn unspecified error has occurred.
SCESTATUS_ALREADY_RUNNINGThe service is already running.
SCESTATUS_SERVICE_NOT_SUPPORTThe specified service is not supported.
SCESTATUS_MOD_NOT_FOUNDAn attachment engine DLL listed in the registry either cannot be found or cannot be loaded.
SCESTATUS_EXCEPTION_IN_SERVERAn exception occurred in the server.


LSA Policy Function Return Values

Most Local Security Authority (LSA) Policy functions return an NTSTATUS value to indicate success or failure. The various NTSTATUS values are defined in Ntstatus.h, which is distributed with the Microsoft Windows Driver Development Kit (DDK).

To convert an NTSTATUS return value to a Windows error code, use the LsaNtStatusToWinError function.

The following table lists the NTSTATUS values that might be returned by any LSA function. (The return value sections for some of the LSA functions list additional error codes that the function might return.) This table also lists the Windows error code that corresponds to each NTSTATUS value.

NTSTATUS code (Windows error code)Meaning


The function was successful.


Caller does not have the appropriate access to complete the operation.


There are not enough system resources (such as memory to allocate buffers) to complete the call.


The LSA database contains an internal inconsistency.


Indicates an object or RPC handle is not valid in the context used.


Indicates the LSA server is currently disabled.


One of the parameters is not valid.


Indicates a specified privilege does not exist.


An object in the LSA policy database was not found. The object may have been specified either by SID or by name, depending on its type.


Generic failure, such as RPC connection failure.