| Previous | Next |
| STATUS_MARKED_TO_DISALLOW_WRITES | STATUS_ENCLAVE_FAILURE |
STATUS_NETWORK_ACCESS_DENIED_EDP
The network destination is outside the allowed enterprise boundary
WIP, also called Enterprise Data Protection in older interfaces, classifies applications and data as enterprise or personal and controls where protected content can be sent. A resource can be reachable at the network layer yet denied because its domain or application is not trusted by the effective policy.
Record the source file classification, calling application identity, destination hostname or UNC path, and effective WIP network boundary. Firewall changes or credential retries will not correct a policy classification mismatch. WIP is deprecated, so long-term remediation should also consider the organization supported Purview or DLP replacement.
What to inspect
- Confirm the app is enlightened, exempt, or unallowed under the effective WIP policy.
- Compare destination domain/IP with configured enterprise network boundaries.
- Review migration plans because WIP is deprecated on newer Windows deployments.
References
- Microsoft: Windows Information Protection policy
- Microsoft: Access control model
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.