HRESULT 0x80320015 (FWP_E_KM_CLIENTS_ONLY): meaning and diagnosis

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The requested operation is available only to kernel-mode callers.

Previous	Next
FWP_E_INCOMPATIBLE_LAYER	FWP_E_LIFETIME_MISMATCH

FWP_E_KM_CLIENTS_ONLY

FWP_E_KM_CLIENTS_ONLY means a user-mode caller attempted an operation reserved for kernel-mode WFP or IPsec clients. It is an API-boundary error, not a Windows Firewall rule failure.

How to address it

Identify whether the operation belongs in a WFP callout driver rather than in a user-mode management program.
Use the documented user-mode filter-engine management APIs when the task is policy configuration.
Do not work around the restriction by changing service privileges; privilege elevation does not turn a user-mode process into a kernel-mode client.

Microsoft: WFP operation

Microsoft: WFP object model

Microsoft: WFP error codes

Looking for a different code? Search another status or error code.