| Previous | Next |
| STATUS_DAX_MAPPING_EXISTS | STATUS_STORAGE_LOST_DATA_PERSISTENCE |
STATUS_CHILD_PROCESS_BLOCKED
Child-process creation was denied by policy
STATUS_CHILD_PROCESS_BLOCKED identifies a specific Windows status in the process security and execution policy path. The parent process is running under a mitigation or application-control rule that prohibits creating child processes. The executable path of the child may be valid yet still be blocked by the parent policy.
Capture parent and child command lines, creation flags, mitigation attributes and policy events. Move the operation to an approved broker or redesign the workflow.
What to preserve before changing the system
- The exact API, caller, target object, original NTSTATUS value, and any nested error or activity ID.
- For STATUS_CHILD_PROCESS_BLOCKED, the relevant process token, package/job/enclave identity, lifecycle state, and policy or mitigation settings.
- For STATUS_CHILD_PROCESS_BLOCKED, operational event logs and a timeline showing the first transition into the failing state.
References for STATUS_CHILD_PROCESS_BLOCKED
- Microsoft: process mitigation policies
- Microsoft: App Control troubleshooting
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.