| Previous | Next |
| STATUS_HV_INVALID_PARAMETER | STATUS_HV_INVALID_PARTITION_STATE |
STATUS_HV_ACCESS_DENIED
The operation is known, but the partition is not authorized for it
STATUS_HV_ACCESS_DENIED identifies a Hyper-V privilege boundary. It should not be diagnosed as a malformed handle or a missing device. Hyper-V exposes privileges and features per partition, so a valid operation for a parent or privileged partition can be unavailable to an ordinary child partition.
For the documented message-posting hypercall, this status means the calling partition lacks the PostMessages privilege. The right response is to establish which partition owns the operation and which privilege set it was created with; retrying from the same unprivileged guest cannot grant a capability.
What to compare
- The calling partition’s privilege mask and the privilege required by the specific hypercall.
- Whether the request belongs in a virtualization host, a child guest, or a Windows Hypervisor Platform client.
- The object ownership and target partition state.
- Any nested-virtualization boundary between the caller and the Hyper-V implementation.
References
- Microsoft: virtualization-host partition lifecycle
- Microsoft: Hyper-V hypercall interface
- Linux source: Hyper-V guest initialization
Looking for a different code? Search another status or error code.