What does NTSTATUS 0xC000028D (STATUS_NO_RECOVERY_POLICY) mean?

 
Previous Next
STATUS_RANGE_NOT_FOUND STATUS_NO_EFS

STATUS_NO_RECOVERY_POLICY

The system has no applicable EFS recovery-agent policy

Encrypting File System can include data-recovery fields so an authorized recovery agent can decrypt files when the user key is unavailable. Domain or local policy determines the configured recovery agents. A missing or invalid policy can block workflows that require recoverability rather than user-only encryption.

Inspect the effective EFS policy and recovery-agent certificates before changing file data. Generate and escrow recovery material through supported administrative procedures; creating a random self-signed certificate on the affected machine does not reconstruct an existing recovery private key.

What to inspect

  • Determine whether local or domain EFS policy is effective on the machine.
  • Verify recovery-agent certificates are valid and their private keys are securely available.
  • Test recovery on a sample file before enforcing the policy broadly.

References


Looking for a different code? Search another status or error code.