What does Windows error code 4551 (ERROR_SYSTEM_INTEGRITY_POLICY_VIOLATION) mean?

ERROR_SYSTEM_INTEGRITY_POLICY_VIOLATION

Your organization used Device Guard to block this app. Contact your support person for more info.

ERROR_SYSTEM_INTEGRITY_POLICY_VIOLATION is Win32 error 4551 (0x11C7) and belongs to System Integrity application control enforcement.

Where the result appears

• Starting an executable, DLL, driver, script, or packaged application.
• Code Integrity validation under WDAC or Device Guard.
• Enterprise allow-list enforcement.
• Servicing that introduces a binary not authorized by active policy.

Likely causes

• the file signer, hash, path, or attributes do not satisfy active policy.
• a binary changed after it was approved.
• the wrong policy was assigned to the device.
• a dependency is blocked even though the main executable is allowed.

Troubleshooting steps

• Record CodeIntegrity event ID and policy identifier.
• Record file path, hash, signer chain, and catalog membership.
• Record active base and supplemental policies.
• Record the exact image or dependency load that failed.
• Record recent application or policy deployment.

What to verify

Verify whether the file signer, hash, path, or attributes do not satisfy active policy. Check CodeIntegrity event ID and policy identifier together with file path, hash, signer chain, and catalog membership.

Handling, retry, and recovery

Identify the blocked binary from Code Integrity logs, verify its provenance, and update the application or authorized policy. Disabling enforcement globally is not a safe first response.

Difference from nearby codes

It indicates enforcement of a valid active policy, not necessarily corruption of the binary or syntax failure in the policy file.

Practical example

An approved application update ships a newly signed helper DLL.

References

• Microsoft: System Error Codes (4000–5999) — reference for error 4551.
• Microsoft: Windows Defender Application Control — reference for error 4551.
• Microsoft: Application Control event logs — reference for error 4551.