What does NTSTATUS 0xC01C000F (STATUS_FLT_DO_NOT_ATTACH) mean?

 
Previous Next
STATUS_FLT_CBDQ_DISABLED STATUS_FLT_DO_NOT_DETACH

STATUS_FLT_DO_NOT_ATTACH

STATUS_FLT_DO_NOT_ATTACH is a documented policy result from an instance setup callback. It prevents a minifilter instance from attaching to a particular volume; it does not by itself indicate a damaged volume or an installation failure.

The callback receives the attachment reason and the volume's device and file-system types. Use those inputs to make a deterministic policy decision, for example to exclude an unsupported filesystem or a volume class that the filter intentionally does not inspect. Avoid thread synchronization or user-mode communication in this callback, because that can create a deadlock in the attachment path.

Diagnose the decision

  • Record automatic versus manual attachment and the volume filesystem type.
  • Log the specific policy condition that returned this status.
  • Do not force a manual attach merely to bypass the filter's own safety policy.

InstanceSetupCallback | Filter Manager concepts | NTSTATUS reference


Looking for a different code? Search another status or error code.