| Previous | Next |
| STATUS_VID_SAVED_STATE_INCOMPATIBLE | STATUS_VOLMGR_DATABASE_FULL |
STATUS_VID_VTL_ACCESS_DENIED
The target VTL is not permitted to access the resource
STATUS_VID_VTL_ACCESS_DENIED belongs to Virtual Secure Mode and Virtual Trust Level isolation. A VTL is a protection level inside a partition, and higher VTLs are more privileged than lower ones.
The status means the requested access is blocked by the VTL security boundary. It is not the same as ordinary file ACL denial or a guest user-account permission problem.
The TLFS describes VTLs as enabled and managed per partition and per virtual processor, so the failing resource, caller VTL, target VTL, and VP state all matter.
What to inspect
- Identify the caller VTL, target VTL, partition, and virtual processor involved in the operation.
- Check whether VSM/VBS, Credential Guard, or another virtualization-based security feature is enabled.
- Do not bypass the failure by weakening guest ACLs; the boundary is enforced by the hypervisor/VSM model.
References
- Microsoft TLFS: Virtual Secure Mode and VTLs
- Microsoft TLFS: HvCallEnablePartitionVtl
- Microsoft: overview of Hyper-V for Windows drivers
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.