Windows Status Codes
The status words Windows reports as one hexadecimal value, decoded in a single table because they share one numeric space. Four spaces meet here: the NTSTATUS results behind a failed sign-in, the SSPI results a security package returns, the servicing stack results a Windows update writes, and the device install results from SetupAPI.
This table decodes 148 codes.
SparkLogs decodes these codes on every event that carries one, regardless of feed. The Windows Application event log, Windows Security event log, Windows Setup event log and Windows System event log feeds read these codes while curating an event.
How to read this
Codes are listed in numeric order. Name is the constant Windows publishes for the code. Token is the short label SparkLogs puts on the event, which is what a question groups by. The last column is our one-line summary of what the code means in plain words. An empty cell means the row carries nothing there; nothing is invented to fill one.
Codes 0x80090302 to 0xc0000413
| Code | Name | Token | What it means |
|---|---|---|---|
0x80090302 | SEC_E_UNSUPPORTED_FUNCTION | function_unsupported | the requested security function is not supported |
0x80090303 | SEC_E_TARGET_UNKNOWN | unknown_target | the target of the security context is unknown or unreachable |
0x80090308 | SEC_E_INVALID_TOKEN | invalid_token | the security token supplied to the package is invalid |
0x8009030d | SEC_E_UNKNOWN_CREDENTIALS | unknown_credentials | the credentials supplied were not recognized by the package |
0x8009030e | SEC_E_NO_CREDENTIALS | no_credentials_available | the security package had no credentials to present |
0x80090311 | SEC_E_NO_AUTHENTICATING_AUTHORITY | no_authenticating_authority | no authority could be reached to authenticate |
0x80090325 | SEC_E_UNTRUSTED_ROOT | untrusted_root | the certificate chain ends in an untrusted root |
0x800f0000 | SPAPI_E_EXPECTED_SECTION_NAME | ||
0x800f0001 | SPAPI_E_BAD_SECTION_NAME_LINE | ||
0x800f0002 | SPAPI_E_SECTION_NAME_TOO_LONG | ||
0x800f0003 | SPAPI_E_GENERAL_SYNTAX | ||
0x800f0100 | SPAPI_E_WRONG_INF_STYLE | ||
0x800f0101 | SPAPI_E_SECTION_NOT_FOUND | ||
0x800f0102 | SPAPI_E_LINE_NOT_FOUND | ||
0x800f0103 | SPAPI_E_NO_BACKUP | ||
0x800f0200 | SPAPI_E_NO_ASSOCIATED_CLASS | ||
0x800f0201 | SPAPI_E_CLASS_MISMATCH | ||
0x800f0202 | SPAPI_E_DUPLICATE_FOUND | ||
0x800f0203 | SPAPI_E_NO_DRIVER_SELECTED | ||
0x800f0204 | SPAPI_E_KEY_DOES_NOT_EXIST | ||
0x800f0205 | SPAPI_E_INVALID_DEVINST_NAME | ||
0x800f0206 | SPAPI_E_INVALID_CLASS | ||
0x800f0207 | SPAPI_E_DEVINST_ALREADY_EXISTS | ||
0x800f0208 | SPAPI_E_DEVINFO_NOT_REGISTERED | ||
0x800f0209 | SPAPI_E_INVALID_REG_PROPERTY | ||
0x800f020a | SPAPI_E_NO_INF | ||
0x800f020b | SPAPI_E_NO_SUCH_DEVINST | ||
0x800f020c | SPAPI_E_CANT_LOAD_CLASS_ICON | ||
0x800f020d | SPAPI_E_INVALID_CLASS_INSTALLER | ||
0x800f020e | SPAPI_E_DI_DO_DEFAULT | ||
0x800f020f | SPAPI_E_DI_NOFILECOPY | ||
0x800f0210 | SPAPI_E_INVALID_HWPROFILE | ||
0x800f0211 | SPAPI_E_NO_DEVICE_SELECTED | ||
0x800f0212 | SPAPI_E_DEVINFO_LIST_LOCKED | ||
0x800f0213 | SPAPI_E_DEVINFO_DATA_LOCKED | ||
0x800f0214 | SPAPI_E_DI_BAD_PATH | ||
0x800f0215 | SPAPI_E_NO_CLASSINSTALL_PARAMS | ||
0x800f0216 | SPAPI_E_FILEQUEUE_LOCKED | ||
0x800f0217 | SPAPI_E_BAD_SERVICE_INSTALLSECT | ||
0x800f0218 | SPAPI_E_NO_CLASS_DRIVER_LIST | ||
0x800f0219 | SPAPI_E_NO_ASSOCIATED_SERVICE | ||
0x800f021a | SPAPI_E_NO_DEFAULT_DEVICE_INTERFACE | ||
0x800f021b | SPAPI_E_DEVICE_INTERFACE_ACTIVE | ||
0x800f021c | SPAPI_E_DEVICE_INTERFACE_REMOVED | ||
0x800f021d | SPAPI_E_BAD_INTERFACE_INSTALLSECT | ||
0x800f021e | SPAPI_E_NO_SUCH_INTERFACE_CLASS | ||
0x800f021f | SPAPI_E_INVALID_REFERENCE_STRING | ||
0x800f0220 | SPAPI_E_INVALID_MACHINENAME | ||
0x800f0221 | SPAPI_E_REMOTE_COMM_FAILURE | ||
0x800f0222 | SPAPI_E_MACHINE_UNAVAILABLE | ||
0x800f0223 | SPAPI_E_NO_CONFIGMGR_SERVICES | ||
0x800f0224 | SPAPI_E_INVALID_PROPPAGE_PROVIDER | ||
0x800f0225 | SPAPI_E_NO_SUCH_DEVICE_INTERFACE | ||
0x800f0226 | SPAPI_E_DI_POSTPROCESSING_REQUIRED | ||
0x800f0227 | SPAPI_E_INVALID_COINSTALLER | ||
0x800f0228 | SPAPI_E_NO_COMPAT_DRIVERS | ||
0x800f0229 | SPAPI_E_NO_DEVICE_ICON | ||
0x800f022a | SPAPI_E_INVALID_INF_LOGCONFIG | ||
0x800f022b | SPAPI_E_DI_DONT_INSTALL | ||
0x800f022c | SPAPI_E_INVALID_FILTER_DRIVER | ||
0x800f022d | SPAPI_E_NON_WINDOWS_NT_DRIVER | ||
0x800f022e | SPAPI_E_NON_WINDOWS_DRIVER | ||
0x800f022f | SPAPI_E_NO_CATALOG_FOR_OEM_INF | ||
0x800f0230 | SPAPI_E_DEVINSTALL_QUEUE_NONNATIVE | ||
0x800f0231 | SPAPI_E_NOT_DISABLEABLE | ||
0x800f0232 | SPAPI_E_CANT_REMOVE_DEVINST | ||
0x800f0233 | SPAPI_E_INVALID_TARGET | ||
0x800f0234 | SPAPI_E_DRIVER_NONNATIVE | ||
0x800f0235 | SPAPI_E_IN_WOW64 | ||
0x800f0236 | SPAPI_E_SET_SYSTEM_RESTORE_POINT | ||
0x800f0237 | SPAPI_E_INCORRECTLY_COPIED_INF | ||
0x800f0238 | SPAPI_E_SCE_DISABLED | ||
0x800f0239 | SPAPI_E_UNKNOWN_EXCEPTION | ||
0x800f023a | SPAPI_E_PNP_REGISTRY_ERROR | ||
0x800f023b | SPAPI_E_REMOTE_REQUEST_UNSUPPORTED | ||
0x800f023c | SPAPI_E_NOT_AN_INSTALLED_OEM_INF | ||
0x800f023d | SPAPI_E_INF_IN_USE_BY_DEVICES | ||
0x800f023e | SPAPI_E_DI_FUNCTION_OBSOLETE | ||
0x800f023f | SPAPI_E_NO_AUTHENTICODE_CATALOG | ||
0x800f0240 | SPAPI_E_AUTHENTICODE_DISALLOWED | ||
0x800f0241 | SPAPI_E_AUTHENTICODE_TRUSTED_PUBLISHER | ||
0x800f0242 | SPAPI_E_AUTHENTICODE_TRUST_NOT_ESTABLISHED | ||
0x800f0243 | SPAPI_E_AUTHENTICODE_PUBLISHER_NOT_TRUSTED | ||
0x800f0244 | SPAPI_E_SIGNATURE_OSATTRIBUTE_MISMATCH | ||
0x800f0245 | SPAPI_E_ONLY_VALIDATE_VIA_AUTHENTICODE | ||
0x800f0246 | SPAPI_E_DEVICE_INSTALLER_NOT_READY | ||
0x800f0247 | SPAPI_E_DRIVER_STORE_ADD_FAILED | ||
0x800f0248 | SPAPI_E_DEVICE_INSTALL_BLOCKED | ||
0x800f0249 | SPAPI_E_DRIVER_INSTALL_BLOCKED | ||
0x800f024a | SPAPI_E_WRONG_INF_TYPE | ||
0x800f024b | SPAPI_E_FILE_HASH_NOT_IN_CATALOG | ||
0x800f024c | SPAPI_E_DRIVER_STORE_DELETE_FAILED | ||
0x800f0300 | SPAPI_E_UNRECOVERABLE_STACK_OVERFLOW | ||
0x800f0805 | CBS_E_INVALID_PACKAGE | servicing_package_invalid | the update package was rejected as invalid, usually download or metadata corruption |
0x800f0806 | CBS_E_PENDING | ||
0x800f080a | CBS_E_REESTABLISH_SESSION | ||
0x800f080c | CBS_E_UNKNOWN_UPDATE | ||
0x800f080d | CBS_E_MANIFEST_INVALID_ITEM | component_manifest_invalid_item | a component manifest in the store holds an entry the servicing stack cannot read |
0x800f0816 | CBS_E_DPX_JOB_STATE_SAVED | ||
0x800f0819 | CBS_E_DUPLICATE_UPDATENAME | ||
0x800f081f | CBS_E_SOURCE_MISSING | component_store_source_missing | the payload the operation needs is not in the store and no repair source supplied it |
0x800f0820 | CBS_E_CANCEL | ||
0x800f0821 | CBS_E_ABORT | servicing_transaction_aborted | the servicing transaction was aborted, typically after the servicing watchdog timeout expired |
0x800f0823 | CBS_E_NEW_SERVICING_STACK_REQUIRED | newer_servicing_stack_required | the package requires a newer servicing stack than the one installed on this machine |
0x800f0825 | CBS_E_CANNOT_UNINSTALL | package_cannot_be_uninstalled | the package cannot be uninstalled, usually because a component is stuck part installed |
0x800f0830 | CBS_E_IMAGE_UNSERVICEABLE | image_unserviceable | the Windows image is too damaged to service and repair in place is not expected to work |
0x800f0831 | CBS_E_STORE_CORRUPTION | component_store_corrupt | the component store is corrupt, which blocks the package from being applied |
0x800f0900 | CBS_E_XML_PARSER_FAILURE | servicing_xml_parse_failed | the servicing stack could not parse servicing XML |
0x800f0902 | CBS_E_BUSY | ||
0x800f0904 | CBS_E_MORE_THAN_ONE_ACTIVE_EDITION | more_than_one_active_edition | the edition metadata names more than one active edition, which is not a valid configuration |
0x800f0905 | CBS_E_NO_ACTIVE_EDITION | no_active_edition | the edition metadata names no active edition |
0x800f0906 | CBS_E_DOWNLOAD_FAILURE | servicing_content_download_failed | content for a Feature on Demand or an inbox corruption repair failed to download |
0x800f0909 | CBS_E_PUBLIC_OBJECT_LEAK | ||
0x800f0911 | CBS_E_SOURCE_MODIFIED | package_source_modified | the package sources were moved or changed since a previous session and have to be downloaded again |
0x800f0915 | CBS_E_REPAIR_CONTENT_MISSING | ||
0x800f0920 | CBS_E_HANG_DETECTED | servicing_hang_detected | the servicing stack stopped responding while processing the operation |
0x800f0922 | CBS_E_INSTALLERS_FAILED | advanced_installers_failed | the advanced installers and generic commands stage of the update failed |
0x800f0950 | CBS_E_NO_OPTIONAL_CONTENT_FOUND_FOR_BUILD | ||
0x800f0982 | PSFX_E_MATCHING_COMPONENT_NOT_FOUND | hydration_component_not_found | no matching component could be identified to hydrate the payload from |
0x800f0983 | PSFX_E_MATCHING_COMPONENT_DIRECTORY_MISSING | ||
0x800f0984 | PSFX_E_MATCHING_BINARY_MISSING | hydration_binary_missing | the matching component directory exists but the binary hydration needs is missing |
0x800f0985 | PSFX_E_APPLY_REVERSE_DELTA_FAILED | reverse_delta_apply_failed | applying a reverse delta failed, usually a missing manifest or payload |
0x800f0986 | PSFX_E_APPLY_FORWARD_DELTA_FAILED | forward_delta_apply_failed | applying a forward delta failed |
0x800f0987 | PSFX_E_NULL_DELTA_HYDRATION_FAILED | null_delta_hydration_failed | hydrating a component from a null delta failed |
0x800f0988 | PSFX_E_INVALID_DELTA_COMBINATION | invalid_delta_combination | the deltas selected for the component cannot be combined |
0x800f0989 | PSFX_E_REVERSE_DELTA_MISSING | reverse_delta_missing | the reverse delta the operation needs is absent from the store |
0x800f0991 | PSFX_E_MISSING_PAYLOAD_FILE | payload_file_missing | a payload file the package depends on is missing |
0x800f1000 | SPAPI_E_ERROR_NOT_INSTALLED | ||
0xc000005e | STATUS_NO_LOGON_SERVERS | no_logon_servers | no logon server was available for the request |
0xc0000064 | STATUS_NO_SUCH_USER | unknown_username | no account exists with that name |
0xc000006a | STATUS_WRONG_PASSWORD | bad_password | account exists and the password was wrong |
0xc000006d | STATUS_LOGON_FAILURE | bad_username_or_auth | generic logon failure with the cause not disclosed |
0xc000006e | STATUS_ACCOUNT_RESTRICTION | account_restriction | an account restriction blocked the logon |
0xc000006f | STATUS_INVALID_LOGON_HOURS | outside_logon_hours | logon attempted outside the permitted hours |
0xc0000070 | STATUS_INVALID_WORKSTATION | workstation_not_authorized | account not permitted to log on from this workstation |
0xc0000071 | STATUS_PASSWORD_EXPIRED | password_expired | the password has expired |
0xc0000072 | STATUS_ACCOUNT_DISABLED | account_disabled | the account is disabled |
0xc0000073 | STATUS_NONE_MAPPED | name_translation_failed | none of the supplied account names or identifiers could be translated to a security identifier |
0xc0000133 | STATUS_TIME_DIFFERENCE_AT_DC | clock_skew | client and domain controller clocks differ too much |
0xc000014d | STATUS_REGISTRY_IO_FAILED | registry_io_failed | an I/O operation on a registry hive file failed, so the registry could not read, write or flush that file |
0xc000015b | STATUS_LOGON_TYPE_NOT_GRANTED | logon_right_not_granted | account lacks the requested logon right |
0xc0000192 | STATUS_NETLOGON_NOT_STARTED | netlogon_not_started | the Netlogon service is not running |
0xc0000193 | STATUS_ACCOUNT_EXPIRED | account_expired | the account has expired |
0xc0000224 | STATUS_PASSWORD_MUST_CHANGE | password_must_change | the password must change before logon succeeds |
0xc0000234 | STATUS_ACCOUNT_LOCKED_OUT | account_locked_out | the account is locked out |
0xc0000371 | STATUS_NO_SECRETS | no_local_secret | the local secret store holds no secret for the account |
0xc0000380 | STATUS_SMARTCARD_WRONG_PIN | smartcard_wrong_pin | the smart card PIN entered was wrong |
0xc0000413 | STATUS_AUTHENTICATION_FIREWALL_FAILED | auth_firewall_blocked | an authentication firewall policy blocked the account |
Ask about these codes
Connect your AI and ask in plain language, or open the same events in Explore.