| Previous | Next |
| STATUS_ACCESS_DISABLED_BY_POLICY_DEFAULT | STATUS_ACCESS_DISABLED_BY_POLICY_PUBLISHER |
STATUS_ACCESS_DISABLED_BY_POLICY_PATH
An SRP path rule denied execution from this path
Path rules can refer to local folders, UNC paths, registry-expanded locations, and environment-variable-based locations. They are sensitive to where the file is resolved and can be weaker than hash or publisher rules when users can write to an allowed directory.
Record the canonical path after environment and link resolution, the matching rule, and directory permissions. Moving the executable may change the result but can also bypass intended policy, so the fix should address rule scope and writable-path risk rather than merely choosing another folder.
What to inspect
- Capture the resolved local or UNC path and the exact matching policy rule.
- Check write permissions on allowed and disallowed directories.
- Prefer signer or hash rules when path ownership is not trustworthy.
References
- Microsoft: Software Restriction Policies
- Microsoft: SaferIdentifyLevel
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.