| Previous | Next |
| ERROR_UNDEFINED_SCOPE | ERROR_DEVICE_UNREACHABLE |
ERROR_INVALID_CAP
The central access policy data is malformed or unusable
ERROR_INVALID_CAP is a Win32 result associated with Dynamic Access Control policy distribution.
What the result means
The Central Access Policy obtained from Active Directory is invalid.
What to check
- Inspect Group Policy and security logs for policy parsing failures.
- Validate the policy on a domain controller and compare replication state.
- Check for unsupported expressions, missing claims, or version mismatches.
- Avoid editing generated policy data directly on the member server.
Recommended handling
Correct and redeploy the policy at its authoritative source. Falling back silently can grant or deny access differently from the intended enterprise policy.
References
Looking for a different code? Search another status or error code.