iassvcs.dll
Associated Error Codes
Below lists error codes and symbolic names found for this module.
| Code | Found in | Description |
|---|---|---|
| 0x23 | 78.11011 | The remote RADIUS server %1 is now available. |
| 0x2a | 78.11011 | Disk full. Deleted older logfile %1 to create free space. |
| 0x1000 | 78.11011 | The RADIUS request was authenticated and authorized by Network Policy Server. |
| 0x1136 | 78.11011 | NPS can now access the primary data store (%1) and is logging accounting information in the data store. |
| 0x1139 | 78.11011 | NPS can now access the secondary data store (%1) and is logging accounting information in the data store. |
| 0x10000038 | 78.11011 | Classic |
| 0x4000002c | 78.11011 | Disk full. Could not find older logfile to delete and create free space. |
| 0x4000002d | 78.11011 | Remote RADIUS to Windows User Mapping |
| 0x40001130 | 78.11011 | A LDAP connection with domain controller %1 for domain %2 is established. |
| 0x80000024 | 78.11011 | The remote RADIUS server %1 has not responded to %2 consecutive requests. The server has been marked as unavailable. |
| 0x80000025 | 78.11011 | |
| 0x80000026 | 78.11011 | |
| 0x80000027 | 78.11011 | |
| 0x80000028 | 78.11011 | Windows |
| 0x80000029 | 78.11011 | RADIUS Proxy |
| 0x80000030 | 78.11011 | Unknown |
| 0x80000031 | 78.11011 | Domain Controller |
| 0x80000032 | 78.11011 | Server |
| 0x80000033 | 78.11011 | Workstation |
| 0x80000034 | 78.11011 | Compliant |
| 0x80000035 | 78.11011 | NonCompliant |
| 0x80000036 | 78.11011 | Infected |
| 0x80000037 | 78.11011 | Transition |
| 0x80000038 | 78.11011 | No Data |
| 0x80000039 | 78.11011 | None |
| 0x8000003a | 78.11011 | Other |
| 0x8000003b | 78.11011 | Client Component |
| 0x8000003c | 78.11011 | Client Communication |
| 0x8000003d | 78.11011 | Server Component |
| 0x8000003e | 78.11011 | Server Communication |
| 0x8000003f | 78.11011 | Unauthenticated |
| 0x80000040 | 78.11011 | Extension |
| 0x80000041 | 78.11011 | Full Access |
| 0x80000042 | 78.11011 | Quarantined |
| 0x80000043 | 78.11011 | On Probation |
| 0x80000044 | 78.11011 | Async |
| 0x80000045 | 78.11011 | Sync |
| 0x80000046 | 78.11011 | ISDN Sync |
| 0x80000047 | 78.11011 | ISDN Async V.120 |
| 0x80000048 | 78.11011 | ISDN Async V.110 |
| 0x80000049 | 78.11011 | Virtual |
| 0x8000004a | 78.11011 | HDLC Clear Channel |
| 0x8000004b | 78.11011 | G.3 Fax |
| 0x8000004c | 78.11011 | Ethernet |
| 0x8000004d | 78.11011 | Cable |
| 0x8000004e | 78.11011 | Wireless - Other |
| 0x8000004f | 78.11011 | Wireless - IEEE 802.11 |
| 0x80000050 | 78.11011 | Accounting information was written to the local log file. |
| 0x80000051 | 78.11011 | Accounting information was written to the SQL data store. |
| 0x80000052 | 78.11011 | Accounting information was written to the SQL data store and the local log file. |
| 0x80000053 | 78.11011 | Accounting information was not written to any data store. |
| 0x80001131 | 78.11011 | Domain controller %1 for domain %2 is not responsive. NPS switches to other DCs. |
| 0x80001133 | 78.11011 | NPS cannot log accounting information in the primary data store (%1). Because of this, NPS is now logging accounting information in the secondary data store. Error information: %2. |
| 0x80001134 | 78.11011 | NPS cannot log accounting information in the primary data store (%1). NPS will continue to process connection requests without logging accounting information in this data store. Error information: %2. |
| 0x80001135 | 78.11011 | NPS cannot log accounting information in the primary data store (%1). Due to this logging failure, NPS will discard all connection requests. Error information: %2. |
| 0x80001137 | 78.11011 | NPS cannot log accounting information in the secondary data store (%1). Due to this logging failure, NPS will discard all connection requests. Error information: %2. |
| 0x80001138 | 78.11011 | NPS cannot log accounting information in the secondary data store (%1). NPS will continue to process connection requests without logging accounting information. Error information: %2. |
| 0x80001140 | 78.11011 | There are some SHV configuration conflict in the Health Policies used by Network Policy: (%1). |
| 0x80001141 | 1011 | IP Address configured in Registry is incorrect, The address (%1) will be ignored. |
| 0x80001143 | 1011 | An Access-Request message was received from RADIUS client %1 containing a Proxy-State attribute, but it did not include a Message-Authenticator attribute. The request is currently allowed since the limitProxyState is configured in Audit mode. See https://support.microsoft.com/help/5040268 to learn more. |
| 0x80001144 | 1011 | The RADIUS Proxy received a response from server %1 with a missing Message-Authenticator attribute. The response is currently allowed since the requireMsgAuth is configured in Audit mode. See https://support.microsoft.com/help/5040268 to learn more. |
| 0x80001145 | 1011 | RequireMsgAuth and/or limitProxyState configuration is in %1 mode. These settings should be configured in Enable mode for security purposes. See https://support.microsoft.com/help/5040268 to learn more. |
| 0xc000000a | 78.11011 | The name, %1, of the RADIUS client, %2, could not be resolved. The data is the error code generated by Windows Sockets. |
| 0xc000000b | 78.11011 | The IP address, %1, of the RADIUS client, %2, is not a valid IP address. |
| 0xc000000c | 78.11011 | An internal error occurred while processing a request. The data is the error code. |
| 0xc000000d | 78.11011 | A RADIUS message was received from the invalid RADIUS client IP address %1. |
| 0xc000000e | 78.11011 | A RADIUS message was received from RADIUS client %1 with an invalid authenticator. This is typically caused by mismatched shared secrets. Verify the configuration of the shared secret for the RADIUS client in the Network Policy Server snap-in and the configuration of the network access server. |
| 0xc000000f | 78.11011 | A malformed RADIUS message was received from client %1. The data is the RADIUS message. |
| 0xc0000010 | 78.11011 | A RADIUS message with the Code field set to %1, which is not valid, was received on port %2 from RADIUS client %3. Valid values of the RADIUS Code field are documented in RFC 2865. |
| 0xc0000011 | 78.11011 | An Access-Request message was received from RADIUS client %1 without a Message-Authenticator attribute when a Message-Authenticator attribute is required. Verify the configuration of the RADIUS client in the Network Policy Server snap-in (the "Client must always send the Message-Authenticator attribute in the request" checkbox) and the configuration of the network access server. |
| 0xc0000012 | 78.11011 | An Access-Request message was received from RADIUS client %1 with a Message-Authenticator attribute that is not valid. |
| 0xc0000013 | 78.11011 | An Access-Request message was received from RADIUS client %1 with an Extensible Authentication Protocol (EAP) message but no Message-Authenticator attribute. |
| 0xc0000014 | 78.11011 | An attribute in the response to RADIUS client %1 exceeds the maximum RADIUS attribute length. The data is the RADIUS attribute type. For more information on the RADIUS attribute type, see RFC 2865 and http://www.isi.edu/in-notes/iana/assignments/radius-types. |
| 0xc0000015 | 78.11011 | The response to RADIUS client %1 exceeds the maximum RADIUS message length of 4096 bytes. |
| 0xc0000016 | 78.11011 | The Network Policy Server (NPS) could not send a response due to a network error. The data is the error code generated by Windows Sockets. |
| 0xc0000017 | 78.11011 | RADIUS_E_ERRORS_OCCURRED |
| 0xc0000018 | 78.11011 | The RADIUS Proxy could not resolve the name of remote RADIUS server %1 in remote RADIUS server group %2 to an IP address. The error code is %3. |
| 0xc0000019 | 78.11011 | The address of remote RADIUS server %1 in remote RADIUS server group %2 resolves to local address %3. The address will be ignored. |
| 0xc000001a | 78.11011 | The RADIUS Proxy received a response from the invalid IP address %1:%2 (IP address:port). |
| 0xc000001b | 78.11011 | The RADIUS Proxy received a malformed response from server %1. The data is the RADIUS message. |
| 0xc000001c | 78.11011 | The RADIUS Proxy received a response from server %1 with an invalid authenticator. |
| 0xc000001d | 78.11011 | The RADIUS Proxy received a response from server %1 with an invalid Message-Authenticator attribute. |
| 0xc000001e | 78.11011 | The RADIUS Proxy received a response from server %1 with a missing Message-Authenticator attribute. |
| 0xc000001f | 78.11011 | The RADIUS Proxy received a response from server %1 with the Code field set to the invalid value of %2. Valid values of the Code field are documented in RFC 2865. |
| 0xc0000020 | 78.11011 | The RADIUS Proxy received an unexpected response from server %1. The data is the RADIUS message. |
| 0xc0000021 | 78.11011 | The RADIUS Proxy was unable to forward a RADIUS request to remote RADIUS server %1 because of a network error. The error code is %2. |
| 0xc0000022 | 78.11011 | The RADIUS Proxy is unable to receive responses because of a network error. The error code is %2. |
| 0xc000002b | 78.11011 | Disk full. Could not delete older logfile %1 to create free space. |
| 0xc000002e | 78.11011 | This edition of Windows Server cannot support any of the following NPS configurations: - More than 50 RADIUS clients - More than two RADIUS server groups - Client identification by subnet mask To set up your server to support any of these configurations, install a Windows Server edition without these limitations. |
| 0xc000002f | 78.11011 | Extension host failed to load extension DLL. Path: %1. Error: %2 |
| 0xc0001001 | 78.11011 | An internal error occurred. Check the system event log for additional information. |
| 0xc0001002 | 78.11011 | There are not sufficient access rights to process the request. |
| 0xc0001003 | 78.11011 | The RADIUS Request message that Network Policy Server received from the network access server was malformed. |
| 0xc0001004 | 78.11011 | The Active Directory global catalog cannot be accessed. |
| 0xc0001005 | 78.11011 | The Network Policy Server was unable to connect to a domain controller in the domain where the account is located. Because of this, authentication and authorization for the RADIUS request could not be performed. |
| 0xc0001006 | 78.11011 | The NPS server is unavailable because of low hardware resources or because it failed to receive the name of a domain controller, which can be due to a security accounts manager (SAM) database failure on the local computer or an NT directory service (NTDS) failure. |
| 0xc0001007 | 78.11011 | The specified domain does not exist. |
| 0xc0001008 | 78.11011 | The specified user account does not exist. |
| 0xc0001009 | 78.11011 | The request was discarded by a third-party extension DLL file. |
| 0xc000100a | 78.11011 | The request was discarded because an extension dll crashed or malfunctioned. |
| 0xc0001010 | 78.11011 | Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect. |
| 0xc0001011 | 78.11011 | The user could not change his or her password because the new password did not meet the password requirements for this network. |
| 0xc0001012 | 78.11011 | The specified authentication type is not supported. |
| 0xc0001013 | 78.11011 | The user could not be authenticated using Challenge Handshake Authentication Protocol (CHAP). A reversibly encrypted password does not exist for this user account. To ensure that reversibly encrypted passwords are enabled, check either the domain password policy or the password settings on the user account. |
| 0xc0001014 | 78.11011 | LAN Manager authentication is not enabled. |
| 0xc0001015 | 78.11011 | An NPS extension dynamic link library (DLL) that is installed on the NPS server rejected the connection request. |
| 0xc0001016 | 78.11011 | The client could not be authenticated because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server. |
| 0xc0001017 | 78.11011 | An error occurred during the Network Policy Server use of the Extensible Authentication Protocol (EAP). Check EAP log files for EAP errors. |
| 0xc0001020 | 78.11011 | The Access-Request message contains a domain user name. NPS is joined to a workgroup and can process connection requests only for local user accounts. |
| 0xc0001021 | 78.11011 | The user must change his or her password. |
| 0xc0001022 | 78.11011 | The user or computer account that is specified in the RADIUS Access-Request message is disabled. |
| 0xc0001023 | 78.11011 | The user or computer account that is specified in the RADIUS Access-Request message is expired. |
| 0xc0001024 | 78.11011 | The user's authentication attempts have exceeded the maximum allowed number of failed attempts specified by the account lockout threshold setting in Account Lockout Policy in Group Policy. To unlock the account, edit the user account properties. |
| 0xc0001025 | 78.11011 | According to Active Directory user account logon hours, the user is not permitted to access the network on this day and time. To change the account logon hours, edit the user account properties in Active Directory. |
| 0xc0001026 | 78.11011 | Authentication failed due to a user account restriction or requirement that was not followed. For example, the user account settings might require the use of a password but the user attempted to log on with a blank password. |
| 0xc0001030 | 78.11011 | The connection request did not match any configured network policy. |
| 0xc0001031 | 78.11011 | The RADIUS request did not match any configured connection request policy (CRP). |
| 0xc0001040 | 78.11011 | Remote Access Account Lockout is enabled, and the user's authentication attempts have exceeded the designated lockout count because the credentials they supplied (user name and password) are not valid. The user account will be removed from the locked out list on successful authentication or on the expiration of the configured lockout time. To manually reset a locked out account, delete the registry subkey that corresponds to the user account name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLockout\domain name:user name |
| 0xc0001041 | 78.11011 | The Network Access Permission setting in the dial-in properties of the user account in Active Directory is set to Deny access to the user. To change the Network Access Permission setting to either Allow access or Control access through NPS Network Policy, obtain the properties of the user account in Active Directory Users and Computers, click the Dial-in tab, and change Network Access Permission. |
| 0xc0001042 | 78.11011 | The user attempted to use an authentication method that is not enabled on the matching network policy. |
| 0xc0001043 | 78.11011 | The user attempted to connect through either a phone number or calling station that does not match the Caller ID listed for the user account. |
| 0xc0001044 | 78.11011 | The user or computer does not have permission to access the network on this day at this time. To change the day and time when the user is permitted to connect to the network, change the Day and Time Restrictions in the constraints of the matching network policy. |
| 0xc0001045 | 78.11011 | The telephone number of the network access server does not match the value of the Called-Station-ID attribute that is configured in the constraints of the matching network policy. NPS denied the Access-Request. |
| 0xc0001046 | 78.11011 | The network access method used by the access client to connect to the network does not match the value of the NAS-Port-Type attribute that is configured in the constraints of the matching network policy. |
| 0xc0001047 | 78.11011 | |
| 0xc0001048 | 78.11011 | The user's password has expired or is about to expire and the user must change it, but the change password option is not enabled for the matching network policy. |
| 0xc0001049 | 78.11011 | The user attempted to authenticate using a certificate with an Extended Key Usage or Issuance Policy that is not allowed by the matching network policy. |
| 0xc0001050 | 78.11011 | The authentication or accounting record could not be written to the configured accounting datastore. Ensure that the log file location is accessible, has available space, can be written to, and that the directory or SQL server is available. |
| 0xc0001060 | 78.11011 | Authentication failed due to an EAP session timeout; the EAP session with the access client was incomplete. |
| 0xc0001061 | 78.11011 | The authentication request was not processed because it contained a Remote Authentication Dial-In User Service (RADIUS) message that was not appropriate for the secure authentication transaction. |
| 0xc0001070 | 78.11011 | The remote RADIUS (Remote Authentication Dial-In User Service) server did not process the authentication request. |
| 0xc0001071 | 78.11011 | The remote RADIUS (Remote Authentication Dial-In User Service) server group does not exist. |
| 0xc0001072 | 78.11011 | The authentication request could not be forwarded to the remote RADIUS (Remote Authentication Dial-In User Service) server because this server is no longer configured from the local server. |
| 0xc0001073 | 78.11011 | The RADIUS request could not be forwarded to the RADIUS server because the issued packet was invalid. |
| 0xc0001074 | 78.11011 | The local NPS proxy server cannot forward the connection request to the remote RADIUS server because network problems caused a Windows socket error. |
| 0xc0001075 | 78.11011 | The remote RADIUS (Remote Authentication Dial-In User Service) server did not respond. |
| 0xc0001076 | 78.11011 | The local NPS proxy server received a RADIUS message that is malformed from a remote RADIUS server, and the message is unreadable. This issue can also be caused if a connection request contains more than the expected number of user-name attributes, or if the user-name attribute value is not valid, such as if the value has zero length or if it contains characters that are not valid. |
| 0xc0001100 | 78.11011 | The certificate is revoked. |
| 0xc0001101 | 78.11011 | No Dll or exported function was found to verify revocation. |
| 0xc0001102 | 78.11011 | The revocation function was unable to check revocation for the certificate. |
| 0xc0001103 | 78.11011 | The revocation function was unable to check revocation because the revocation server was offline. |
| 0xc0001104 | 78.11011 | The message or signature supplied for verification has been altered |
| 0xc0001105 | 78.11011 | No authority could be contacted for authentication. |
| 0xc0001106 | 78.11011 | The supplied message is incomplete. The signature was not verified. |
| 0xc0001107 | 78.11011 | The credentials supplied were not complete, and could not be verified. The context could not be initialized. |
| 0xc0001108 | 78.11011 | The clocks on the client and server machines are skewed. |
| 0xc0001109 | 78.11011 | The certificate chain was issued by an authority that is not trusted. |
| 0xc000110a | 78.11011 | The message received was unexpected or badly formatted. |
| 0xc000110b | 78.11011 | The certificate is not valid for the requested usage. |
| 0xc000110c | 78.11011 | The received certificate has expired. |
| 0xc000110d | 78.11011 | The client and server cannot communicate, because they do not possess a common algorithm. |
| 0xc000110e | 78.11011 | Smartcard logon is required and was not used. |
| 0xc000110f | 78.11011 | A system shutdown is in progress. |
| 0xc0001110 | 78.11011 | The received certificate was mapped to multiple accounts. |
| 0xc0001111 | 78.11011 | Unknown trust provider. |
| 0xc0001112 | 78.11011 | The trust verification action specified is not supported by the specified trust provider. |
| 0xc0001113 | 78.11011 | The form specified for the subject is not one supported or known by the specified trust provider. |
| 0xc0001114 | 78.11011 | The subject is not trusted for the specified action. |
| 0xc0001115 | 78.11011 | No signature was present in the subject. |
| 0xc0001116 | 78.11011 | A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. |
| 0xc0001117 | 78.11011 | The validity periods of the certification chain do not nest correctly. |
| 0xc0001118 | 78.11011 | A certificate that can only be used as an end-entity is being used as a CA or visa versa. |
| 0xc0001119 | 78.11011 | A path length constraint in the certification chain has been violated. |
| 0xc000111a | 78.11011 | A certificate contains an unknown extension that is marked 'critical'. |
| 0xc000111b | 78.11011 | A certificate being used for a purpose other than the ones specified by its CA. |
| 0xc000111c | 78.11011 | A parent of a given certificate in fact did not issue that child certificate. |
| 0xc000111d | 78.11011 | A certificate is missing or has an empty value for an important field, such as a subject or issuer name. |
| 0xc000111e | 78.11011 | A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. |
| 0xc000111f | 78.11011 | A certificate chain could not be built to a trusted root authority. |
| 0xc0001120 | 78.11011 | Generic trust failure. |
| 0xc0001121 | 78.11011 | A certificate was explicitly revoked by its issuer. |
| 0xc0001122 | 78.11011 | The certification path terminates with the test root which is not trusted with the current policy settings. |
| 0xc0001123 | 78.11011 | The revocation process could not continue - the certificate(s) could not be checked. |
| 0xc0001124 | 78.11011 | The certificate's CN name does not match the passed value. |
| 0xc0001125 | 78.11011 | The certificate is not valid for the requested usage. |
| 0xc0001126 | 78.11011 | The certificate was explicitly marked as untrusted by the user. |
| 0xc0001127 | 78.11011 | A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider. |
| 0xc0001128 | 78.11011 | The certificate has invalid policy. |
| 0xc0001129 | 78.11011 | The certificate has an invalid name. The name is not included in the permitted list or is explicitly excluded. |
| 0xc000112a | 78.11011 | The client cert name does not matches the user name or the KDC name is incorrect. |
| 0xc000112b | 78.11011 | The message supplied for verification is out of sequence |
| 0xc000112c | 78.11011 | No credentials are available in the security package |
| 0xc000112d | 78.11011 | Received Crypto-Binding TLV is invalid. |
| 0xc000112e | 78.11011 | Expected Crypto-Binding TLV not received. |
| 0xc000112f | 78.11011 | The Request is dropped due to congestion control. |
| 0xc0001132 | 78.11011 | There is no domain controller available for domain %1. |
| 0xc0001142 | 1011 | An Access-Request message was received from RADIUS client %1 containing a Proxy-State attribute, but it did not include a Message-Authenticator attribute. As a result, the request was dropped. The Message-Authenticator attribute is mandatory for security purposes. See https://support.microsoft.com/help/5040268 to learn more. |
| 187 entries | ||