| Previous | Next |
| FILTER_S_NO_PROPSETS | LANGUAGE_S_LARGE_WORD |
FILTER_S_NO_SECURITY_DESCRIPTOR
Document has no security descriptor available to the filter
FILTER_S_NO_SECURITY_DESCRIPTOR is HRESULT 268092 (0x0004173C) from Indexing Service. The documented description is “The document has no security descriptor.” The severity bit indicates a nonfailure result, but the value carries a specific condition that must not be collapsed into plain S_OK.
In the legacy Indexing Service or IFilter pipeline, this result means that the document has no security descriptor. Handling is complete only after the caller verifies what work occurred and what remains outstanding.
Where the status is encountered
- Legacy Indexing Service catalog processing; log the exact method and object state instead of interpreting the constant outside that contract.
- IFilter text and property extraction; log the exact method and object state instead of interpreting the constant outside that contract.
- Search enumeration, scan scheduling, or catalog administration; log the exact method and object state instead of interpreting the constant outside that contract.
What must be true before accepting it
Verify that the indexing system applies a safe visibility policy instead of assuming unrestricted access. Failure to prove the boundary can make it look healthy while the intended operation remains unfinished.
Classify the operation phase reached when this HRESULT was returned before releasing objects or issuing replacement work.
Evidence to preserve
- Preserve document and repository identity.
- Preserve filter security output.
- Preserve fallback ACL source.
- Preserve effective indexed permissions.
- Preserve policy decision for missing authorization.
Correct handling and recovery
Use the repository or file-system ACL when available. If no authoritative security source exists, quarantine or exclude the item according to policy rather than indexing it for every user.
Practical scenario
A custom repository filter cannot return an item ACL. The connector retrieves authorization from the repository API before publishing the document to searchable scopes.
References
- Microsoft: Filter interface values — official Microsoft material relevant to this HRESULT.
- Microsoft: About Indexing Service filters
- Microsoft: Using custom filters
- Microsoft: HRESULT values
Looking for a different code? Search another status or error code.