What does Windows error code 994 (ERROR_EA_ACCESS_DENIED) mean?

ERROR_EA_ACCESS_DENIED

access to the extended attribute was denied.

ERROR_EA_ACCESS_DENIED means that windows rejected access to an extended attribute associated with a file or directory.

Where the result appears

• code reading or updating NTFS extended attributes through native file APIs.
• file-copy, backup, restore, migration, or compatibility tools that preserve metadata.
• security software inspecting metadata attached to filesystem objects.
• cross-platform software translating OS/2-style extended attributes or application metadata.

Typical causes

• the caller lacks the rights required to read or modify the target object or its metadata.
• the object is protected by an ACL, integrity level, policy, or security product.
• the file was opened without access compatible with the requested metadata operation.
• the attribute operation crosses a filesystem or redirector boundary that applies stricter rules.

What to collect

• full path and whether it is local, removable, redirected, or network-backed.
• requested access mask, share mode, impersonation identity, and effective token.
• the exact API and whether the failure occurred during query, create, replace, or delete.
• filesystem type, security descriptor, integrity level, and relevant audit events.

Handling and recovery

Treat the result as an authorization or open-mode problem rather than as proof that the file data itself is unreadable. Reopen the object with the least additional access actually required, or omit nonessential metadata preservation when the product specification permits it. Do not silently elevate privileges merely to copy an attribute.

Common misinterpretation

It is not equivalent to a general file-open denial. The primary data stream may remain accessible while the extended-attribute operation is refused.

References

• Microsoft: System error codes 1000–1299