Windows error 683 (ERROR_PLUGPLAY_QUERY

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: a Plug and Play query was explicitly vetoed by a component in the operation.

Previous	Next
ERROR_LONGJUMP	ERROR_UNWIND_CONSOLIDATE

ERROR_PLUGPLAY_QUERY_VETOED

A PnP component refused a proposed device transition before Windows committed it

Plug and Play uses query operations to determine whether a device transition can occur without disrupting the system. For example, IRP_MN_QUERY_REMOVE_DEVICE lets each driver in the stack refuse orderly removal when the device is still required. This error records a veto rather than a timeout or surprise removal.

Find the vetoing component and its reason. An open handle by itself is not always the complete explanation: boot, paging, hibernation, active streaming, or a driver-specific state can legitimately make removal unsafe. Compare the status with query-remove notifications and PnP events for the same devnode. If writing a driver, fail a query only when removal would genuinely disrupt operation and be prepared to restore state after IRP_MN_CANCEL_REMOVE_DEVICE when another layer vetoes the request.

What to inspect

Identify the devnode, query type, and component that returned failure.
Check whether the device participates in paging, dump, hibernation, or active critical I/O.
Verify cancel-remove restores the started state after another driver vetoes the query.

References

Looking for a different code? Search another status or error code.