What does NTSTATUS 0xC022001D (STATUS_FWP_INVALID_ENUMERATOR) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

A WFP enumeration handle or its enumeration state is no longer valid.

Previous	Next
STATUS_FWP_NULL_POINTER	STATUS_FWP_INVALID_FLAGS

STATUS_FWP_INVALID_ENUMERATOR

The query cursor is invalid, not necessarily the policy object

STATUS_FWP_INVALID_ENUMERATOR identifies the enumeration state used by a WFP management call. It does not establish that the requested filter, provider, or callout is missing. An enumeration handle is tied to the filter-engine session and object class that created it, so a stale, closed, or cross-session handle cannot be reused as a generic cursor.

Capture handle creation, enumeration, and destruction as one sequence. In concurrent code, distinguish a handle whose owner has already closed the engine from a valid handle that simply enumerated no more results. Creating a new cursor after every failure can hide invalid ownership or cleanup ordering.

What to inspect

The Fwpm*CreateEnumHandle0 call, object class, and engine session that created the handle.
Whether another thread destroyed the handle or closed the engine session before enumeration.
The exact enumeration template and API version used to create and consume the handle.
Whether the error is distinct from an empty result set or a missing WFP object.

References

Looking for a different code? Search another status or error code.