| Previous | Next |
| VDS_E_INCOMPATIBLE_MEDIA | VDS_E_MEDIA_WRITE_PROTECTED |
VDS_E_ACCESS_DENIED
VDS_E_ACCESS_DENIED is a Virtual Disk Service authorization failure. The MS-VDS contract is unusually specific: VDS operations must run under an account in the Administrators or Backup Operators group. This is narrower than a generic file-system ACL failure and should be diagnosed at the identity used by the COM client or management host.
Check the caller before changing the disk
The same formatting method can also return separate codes for write-protected media, incompatible media, or protected critical volumes. Because those conditions have their own VDS results, broad changes such as clearing read-only state or taking a disk online are not a substitute for confirming the caller token when this HRESULT is returned.
What to verify
- Record the process identity and elevation state of the VDS client that made the failing call.
- Verify membership in Administrators or Backup Operators in the security context that actually activates VDS.
- Keep the exact VDS method and any provider error in the event sequence; a later storage-state error can identify a second problem after authorization succeeds.
References
Looking for a different code? Search another status or error code.