Windows error 217 (ERROR_EXE_CANNOT_MODIFY_SIGNED

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: Windows refused to modify an executable image because it is digitally signed.

Could be also:
Constant	Type	OS
LOCKED_PAGES_TRACKER_CORRUPTION	BugCheck Code	Windows

Previous	Next
ERROR_EXE_MACHINE_TYPE_MISMATCH	ERROR_EXE_CANNOT_MODIFY_STRONG_SIGNED_BINARY

ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY

A signed executable cannot be modified in place

ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY is a Win32 result associated with patching, resource editing, instrumentation, or deployment of signed binaries. When ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY is returned, diagnosis should begin with the exact API, target object, and operation that produced it rather than with the message text alone.

What the result means

Windows refused to modify an executable image because it is digitally signed. For ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY, the practical meaning depends on the caller and on whether the affected object is local, remote, removable, policy-managed, or handled asynchronously. Diagnostics for ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY should retain its symbolic name, numeric value, and the operation name together.

What to check

Confirm that the target really is the intended executable and inspect its Authenticode signature.
Check whether the tool is trying to update resources, headers, imports, or embedded metadata.
Modify an unsigned build artifact before signing rather than editing the deployed signed image.
Preserve the original file and verify the replacement signature after rebuilding.

Recommended handling

Any byte-level modification normally invalidates the existing signature. Rebuild the binary through the trusted build pipeline and sign the final artifact; do not bypass signature protection on production systems.

Developer notes

Code handling ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY should capture the failing API, resolved path or device identity, requested access, process identity, and the first observed error. After a call that reports ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY, read GetLastError() immediately because later cleanup or logging can overwrite the value. Retry ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY only when the specific condition is documented as transient, using a bounded delay and cancellation support.

References

Looking for a different code? Search another status or error code.