What does HRESULT 0x80041703 (FILTER_E_ACCESS) mean?

FILTER_E_ACCESS

The filter cannot access the source object

FILTER_E_ACCESS is HRESULT 0x80041703. Windows documents it as “Unable to access object.”

State represented by the HRESULT

This result belongs to opening or reading the document, stream, storage or dependent resource used by a filter handler. The handler cannot obtain the bytes or object state required to continue extraction.

Likely triggers

• At step 1, the service identity lacks read permission
• At step 2, the source stream was revoked or closed
• At step 3, a network or storage provider denies access
• At step 4, the handler requires a child object that is not accessible

Compare the failing case with a control that preserves source path or persistent identity and changes only filter host identity and token; this prevents unrelated environment differences from dominating the test.

Data for diagnosis

• Source path or persistent identity.
• Filter host identity and token.
• Underlying storage error and timestamp.
• Access mode used to initialize the handler.

Capture source path or persistent identity before releasing objects, closing handles or reconnecting. Retain the raw HRESULT with filter host identity and token, component version, UTC timestamp and correlation ID.

Investigation order

1. Reproduce a minimal read under the actual filter-host identity.
2. Separate ACL denial from missing, offline or locked content.
3. Check whether the source handle remained valid for the entire filter lifetime.
4. Capture the lower-level error before the handler maps it to this HRESULT.

Preserve the component version and target identity, then alter only the condition described as the handler cannot obtain the bytes or object state required to continue extraction.

Correct response

Restore narrowly scoped read access or a valid stream, then create a fresh filter instance. Blind retry without changing access state is not useful. Record whether opening or reading the document, stream, storage or dependent resource used by a filter handler produced any content, update or state transition before returning.

Retry only after a concrete change in source path or persistent identity or filter host identity and token.

Scope of the signal

It does not identify which ACL, stream operation or embedded object caused the denial. Without the call boundary for opening or reading the document, stream, storage or dependent resource used by a filter handler, it also cannot identify which wrapper or configuration layer introduced the condition.

Related HRESULT values

FILTER_E_UNREACHABLE concerns reachability, while it indicates an access attempt was refused or could not be completed.

Developer and administrator actions

• Record source path or persistent identity with the returned HRESULT.
• In telemetry, correlate filter host identity and token with the target and component generation.
• For regression coverage, force the documented condition: the handler cannot obtain the bytes or object state required to continue extraction.

Example in a pipeline

An interactive test succeeds but the search filter host runs under a service account without access to an encrypted share. Token-aware testing exposes the difference.

Official Microsoft references

• Microsoft: Filter-Interface values — official contract information relevant to this HRESULT.
• Microsoft: IFilter interface
• Microsoft: filter handlers in Windows Search
• Microsoft: testing filter handlers