| Previous | Next |
| STATUS_IMAGE_CERT_EXPIRED | STATUS_SET_CONTEXT_DENIED |
STATUS_STRICT_CFG_VIOLATION
Strict Control Flow Guard rejected the image
STATUS_STRICT_CFG_VIOLATION identifies a specific Windows status in the process security and execution policy path. A process requiring strict CFG attempted to load an image that does not provide the required Guard metadata. A valid signature alone does not satisfy this mitigation.
Inspect PE load-config Guard flags and toolchain settings for every loaded module, including plugins and injected DLLs. Rebuild or replace the incompatible image.
What to preserve before changing the system
- The exact API, caller, target object, original NTSTATUS value, and any nested error or activity ID.
- the relevant process token, package/job/enclave identity, lifecycle state, and policy or mitigation settings.
- operational event logs and a timeline showing the first transition into the failing state.
References
- Microsoft: process mitigation policies
- Microsoft: App Control troubleshooting
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.