What does Windows error code 13005 (ERROR_IPSEC_MM_POLICY_IN_USE) mean?

 
Previous Next
ERROR_IPSEC_MM_POLICY_NOT_FOUND ERROR_IPSEC_MM_FILTER_EXISTS

ERROR_IPSEC_MM_POLICY_IN_USE

ERROR_IPSEC_MM_POLICY_IN_USE (0x000032CD) The requested policy object is currently in use by another IPsec configuration object or active operation. Removing it immediately can break existing connection-security rules or in-flight security associations.

Enumerate filters, authentication methods, and active associations that depend on the Main Mode policy. Repoint or remove those dependencies first, then retire the policy after the engine no longer reports it as in use.

What to check

  • Identify the related connection-security rules and the security associations currently using the policy before attempting deletion.
  • Apply policy changes through the managed source of truth, then allow the policy engine to reconcile the active configuration.
  • If a maintenance window is required, drain or disable the dependent rule first instead of force-removing the policy object.
Get-NetIPsecMainModeSA

Microsoft: Get-NetIPsecMainModeSA

Microsoft: Get-NetIPsecMainModeRule

Microsoft: IPsec/IKE system error codes


Looking for a different code? Search another status or error code.