What does HRESULT 0xC00D716E (MF_E_USERMODE_UNTRUSTED) mean?

MF_E_USERMODE_UNTRUSTED

MF_E_USERMODE_UNTRUSTED identifies the user-mode side of Protected Environment trust. The PMP threat model assumes that arbitrary DLLs and media plug-ins in an ordinary user-mode process cannot automatically be trusted with decrypted protected content.

Inventory user-mode modules in the protected path

• Record the CLSIDs and module paths of transforms, sinks, and custom topology components selected for the protected presentation.
• Look for locally registered or application-local media plug-ins that replace a system component.
• Use revocation information, when available, to distinguish a user-mode component load failure from a kernel-mode failure; MFRR_COMPONENT_HASH_INFO defines flags for both categories.

Testing the same content in an ordinary unprotected session exercises a different trust boundary and is not equivalent. If the unprotected test succeeds, keep investigating component trust rather than codec syntax. Protected Media Path requires trusted components in the Protected Environment and blocks the pipeline when policy cannot be enforced.

Microsoft: Protected Environment design · Microsoft: user-mode and kernel-mode revocation flags · Microsoft: trusted components in PMP