What does NTSTATUS 0xC0220017 (STATUS_FWP_BUILTIN_OBJECT) mean?

 
Previous Next
STATUS_FWP_LIFETIME_MISMATCH STATUS_FWP_TOO_MANY_CALLOUTS

STATUS_FWP_BUILTIN_OBJECT

The object belongs to the Base Filtering Engine’s built-in model

STATUS_FWP_BUILTIN_OBJECT means the requested delete targets a built-in WFP object. Built-in objects are predefined by BFE, cannot be added or deleted by clients, and have a permanent lifetime. This is different from a provider-owned static or persistent object that happens to be shared by several products.

Do not treat a built-in layer or sublayer as removable application policy. Diagnose why the client selected it, then adjust only the filters, providers, or sublayers that the application actually owns. Removing dependent policy is also a separate question from attempting to delete the built-in container.

What to verify

  • The object type, key, and whether it is documented as a built-in identifier.
  • The provider or application ownership of nearby custom objects.
  • Whether the intended result is to remove a filter, disable a service-owned provider, or change arbitration.
  • The cleanup code’s distinction between custom and built-in resources.

References


Looking for a different code? Search another status or error code.