The security descriptor structure is invalid.

The inherited access control list (ACL) or access control entry (ACE) could not be built.

The server is currently disabled.

The server is currently enabled.

The value provided was an invalid value for an identifier authority.

No more memory is available for security information updates.

The specified attributes are invalid, or incompatible with the attributes for the group as a whole.

Either a required impersonation level was not provided, or the provided impersonation level is invalid.

Cannot open an anonymous level security token.

The validation information class requested was invalid.

The type of the token is inappropriate for its attempted use.

Unable to perform a security operation on an object that has no associated security.

Configuration information could not be read from the domain controller, either because the machine is unavaila

The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform

The domain was in the wrong state to perform the security operation.

This operation is only allowed for the Primary Domain Controller of the domain.

The specified domain either does not exist or could not be contacted.

The specified domain already exists.

An attempt was made to exceed the limit on the number of domains per server.

Unable to complete the requested operation because of either a catastrophic media failure or a data structure

An internal error occurred.

Generic access types were contained in an access mask which should already be mapped to nongeneric types.

A security descriptor is not in the right format (absolute or self-relative).

The requested action is restricted for use by logon processes only. The calling process has not registered as

Cannot start a new logon session with an ID that is already in use.

A specified authentication package is unknown.

The logon session is not in a state that is consistent with the requested operation.

The logon session ID is already in use.

A logon request contained an invalid logon type value.

Unable to impersonate using a named pipe until data has been read from that pipe.

The transaction state of a registry subtree is incompatible with the requested operation.

An internal security database corruption has been encountered.

Cannot perform this operation on built-in accounts.

Cannot perform this operation on this built-in special group.

Cannot perform this operation on this built-in special user.

The user cannot be removed from a group because the group is currently the user's primary group.

The token is already in use as a primary token.

The specified local group does not exist.

The specified account name is not a member of the group.

The specified account name is already a member of the group.

The specified local group already exists.

Logon failure: the user has not been granted the requested logon type at this computer.

The maximum number of secrets that may be stored in a single system has been exceeded.

The length of a secret exceeds the maximum length allowed.

The local security authority database contains an internal inconsistency.

During a logon attempt, the user's security context accumulated too many security IDs.

Logon failure: the user has not been granted the requested logon type at this computer.

A cross-encrypted password is necessary to change a user password.

A member could not be added to or removed from the local group because the member does not exist.

A new member could not be added to a local group because the member has the wrong account type.