What does NTSTATUS 0xC000A201 (STATUS_NOT_SUPPORTED_IN_APPCONTAINER) mean?

 
Previous Next
STATUS_NOT_APPCONTAINER STATUS_INVALID_PACKAGE_SID_LENGTH

STATUS_NOT_SUPPORTED_IN_APPCONTAINER

The operation is outside the AppContainer contract

This status is a policy or platform-boundary result rather than ordinary discretionary access denial. The caller is correctly identified as an AppContainer, but the API or operation is not supported from that constrained environment. Granting another file ACL or adding an unrelated capability will not necessarily make an unsupported system operation valid.

AppContainer applications normally use capability-aware APIs or communicate with a broker that performs narrowly defined privileged work. The broker must validate requests and expose only the minimum operation required. Moving the entire application to full trust removes isolation and is not equivalent to solving the compatibility issue.

What to inspect

  • Identify the exact API and document whether it supports AppContainer or requires a brokered alternative.
  • Record the package capabilities and effective token, but do not assume an extra capability overrides unsupported behavior.
  • Check whether only one helper component needs medium integrity or whether a supported WinRT API exists.
  • Keep privileged broker inputs constrained, authenticated, and validated against caller identity.

References


Looking for a different code? Search another status or error code.