What does Windows error code 356 (ERROR_EDP_POLICY_DENIES_OPERATION) mean?

 
Could be also:
ConstantTypeOS
WIN32K_CRITICAL_FAILUREBugCheck CodeWindows
Previous Next
ERROR_DEVICE_HINT_NAME_BUFFER_TOO_SMALL ERROR_EDP_DPL_POLICY_CANT_BE_SATISFIED

ERROR_EDP_POLICY_DENIES_OPERATION

Data-protection policy forbids the operation

ERROR_EDP_POLICY_DENIES_OPERATION is a Win32 system result. This result covers a broader policy denial than ordinary filesystem permissions. The operation conflicts with enterprise rules governing how protected data may be opened, transformed, shared, or moved.

What the result means

Enterprise data-protection policy explicitly denied the requested operation. For ERROR_EDP_POLICY_DENIES_OPERATION, keep the symbolic name, numeric value, and failing operation together in diagnostics; that combination distinguishes the exact failure path from nearby system results.

What to check

  • Identify the application identity, user identity, and protection state of the data.
  • Determine the exact operation denied: open, copy, export, print, share, or another transition.
  • Review effective enterprise policy and recent management changes.
  • Confirm whether an approved corporate application or destination is available.

Recommended handling

Stop the operation and explain that administrative policy controls it. Offer an approved workflow where possible and retain unsaved work without moving it to an unprotected location.

Developer notes

Do not map the result to generic access denied or automatically retry with elevation. Include the policy-aware operation type in telemetry and avoid exposing protected content. When a Win32 API reports ERROR_EDP_POLICY_DENIES_OPERATION, capture GetLastError() immediately; subsequent cleanup, formatting, or logging calls can replace the thread-local value.

References


Looking for a different code? Search another status or error code.