0XC000015B

Fix STATUS_LOGON_TYPE_NOT_GRANTED (0XC000015B) Error

EP
Erropedia Team
📅 May 29, 2026 📅 Updated Jul 31, 2026 👁 11 views Network & Connectivity Intermediate
Logon type not granted means Windows denied your connection method. Usually it's a local security policy or network service setting. We'll fix it in three steps.

What Actually Causes 0XC000015B?

You see STATUS_LOGON_TYPE_NOT_GRANTED (0XC000015B) when Windows explicitly blocks the type of logon you're trying to use. This happens most often with Remote Desktop (RDP) connections, but also with network shares, printer connections, or scheduled tasks. The system isn't saying your password is wrong — it's saying you're not allowed to log in that way.

Common triggers:

  • You just changed a user password on an RDP machine
  • A Group Policy update pushed new restrictions
  • You're using a local account instead of a domain account
  • Network Level Authentication (NLA) is mismatched between client and server

Let's walk through the fixes from easiest to most involved. You can stop after any section that works for you.

Fix 1: Check Network Level Authentication (30 seconds)

This is the fix you try first because it's nearly instant. Half the time this is the culprit.

  1. On the machine you're trying to connect to (the remote computer), right-click the Start button and select System.
  2. On the left side, click Remote Desktop.
  3. Make sure Enable Remote Desktop is turned on.
  4. Under that, look for a checkbox that says Require devices to use Network Level Authentication to connect.

Here's the trick: If this box is checked, uncheck it, click Apply, and try connecting again. You should see the credentials prompt instead of the error. If that works, you've got an NLA mismatch — the remote machine is demanding NLA, but your client isn't meeting the requirement. You can re-enable NLA later by making sure both machines have the same Windows update level and NLA enabled.

After unchecking, wait 10 seconds and test. If the error's gone, you're done. If not, move on to Fix 2.

Fix 2: Adjust Local Security Policy (5 minutes)

This is where we fix the actual policy that denies Remote Desktop logons. The error's full name — STATUS_LOGON_TYPE_NOT_GRANTED — means this policy is set to deny "Remote Interactive" or "Network" logons for your user account.

  1. Press Windows Key + R, type secpol.msc, and hit Enter. This opens the Local Security Policy editor.
  2. In the left pane, expand Local Policies, then click User Rights Assignment.
  3. Scroll down to find Deny log on through Remote Desktop Services. Double-click it.
  4. Look in the list for your username, your computer name, or any group like "Users" or "Everyone." If you see anything, select it and click Remove.
  5. Click Apply and OK.
  6. Now find Allow log on through Remote Desktop Services. Double-click it.
  7. Click Add User or Group, type your username, and click Check Names to verify it resolves. Click OK.
  8. Click Apply and OK.

Important: After making these changes, close the Remote Desktop client completely, not just disconnect. Wait about 30 seconds for group policy to refresh, then try connecting again. If you still see the error, run gpupdate /force in Command Prompt as admin, then retry.

This fix works for about 80% of cases. If you're still stuck, let's go deeper.

Fix 3: Remove Stored Credentials and Check Services (15+ minutes)

This is the advanced fix. It's for when the policy is correct but Windows still refuses the logon. Usually this happens after a password change or a domain migration.

Step 3a: Clear Stored Credentials

  1. Open Control Panel > User Accounts > Credential Manager.
  2. Click Windows Credentials.
  3. Look for any entries under Generic Credentials that reference the remote computer's name or IP address. They might look like TERMSRV/192.168.1.100 or MicrosoftAccount:user@domain.com.
  4. Click the arrow to expand each one, then click Remove. Confirm when prompted.
  5. Close Credential Manager.

Step 3b: Verify Remote Desktop Services Are Running

  1. Press Windows Key + R, type services.msc, and hit Enter.
  2. Find Remote Desktop Services (also called TermService). Double-click it.
  3. Make sure the Startup type is Automatic and the Status shows Running.
  4. Find Remote Desktop Services UserMode Port Redirector (also called UmRdpService). Double-click it.
  5. Set Startup type to Automatic and click Start if it's not running.
  6. Close the Services window.

Step 3c: Check Network Service Account Permissions

This one trips up a lot of people. The NETWORK SERVICE account needs specific permissions on the remote machine.

  1. Open Local Security Policy again (secpol.msc).
  2. Go to Local Policies > User Rights Assignment.
  3. Find Impersonate a client after authentication. Double-click it.
  4. Click Add User or Group, type NETWORK SERVICE, and click OK.
  5. Click Apply and OK.

After all this, restart the remote computer. Not just log off — a full restart. Wait for it to come back up, then try your connection again.

What If None of This Works?

If you've run through all three fixes and still get 0XC000015B, you're likely dealing with a Group Policy from a domain controller overriding local settings. In that case:

  • Contact your domain admin and ask them to check the Default Domain Policy for the "Deny log on through Remote Desktop Services" setting.
  • Check if your user account is part of the Remote Desktop Users group on the target machine. You can do this by running lusrmgr.msc on the remote computer, going to Groups, and verifying your account is listed.

The error is frustrating but it's Windows doing exactly what it's been told to do. You just have to find out who told it to deny you, and fix that instruction.

Related Errors in Network & Connectivity
0X8010000B Smart card sharing violation 0x8010000B — fix in 5 minutes 0X000020F3 Active Directory Role Transfer Fails With 0X000020F3 Why Your Network Shows 'Unidentified Network' (Public Fix) 0x00000709 Print to PDF fails on network with error 0x00000709
STATUS_LOGON_TYPE_NOT_GRANTED 0XC000015B logon type not granted network logon failure RDP access denied Windows authentication error Secpol.msc fix deny logon through Remote Desktop Services NLA error credential error 0XC000015B fix printer connection access denied Windows 10 0XC000015B Windows 11 0XC000015B

Was this solution helpful?

EP
Erropedia Team
Tech Support Editors
The Erropedia editorial team researches and documents real-world tech errors from across Windows, Linux, macOS, networking, databases, cloud platforms, and more. Every solution is reviewed for accuracy and updated as software and systems evolve.