What does Windows error code 1183 (ERROR_VRF_CFG_ENABLED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: Driver Verifier rejected a volatile configuration change while Control Flow Guard is enabled.

Previous	Next
ERROR_JOURNAL_ENTRY_DELETED	ERROR_PARTITION_TERMINATING

ERROR_VRF_CFG_ENABLED

A requested Driver Verifier runtime setting is incompatible with the active CFG configuration.

ERROR_VRF_CFG_ENABLED is Win32 error 1183 (0x49F). Its system description states that Driver Verifier volatile settings cannot be set when CFG is enabled. This is a test-environment configuration conflict, not evidence that the driver being tested has already violated a verifier rule.

What “volatile” means here

Volatile Driver Verifier changes take effect without the traditional reboot and remain active only until restart or a later runtime change. Windows supports only a restricted set of such operations, and newer releases steer some scenarios toward other command syntax. A script written for an older host can therefore fail even though its driver name and privilege level are correct.

Diagnostic checklist

capture the exact verifier.exe command line and its exit code
record Windows build, security configuration, and whether CFG-related protection is active
run verifier /querysettings to inspect boot-time settings
inspect currently active runtime settings separately from settings scheduled for next boot
confirm that the requested flag is supported as a volatile option on this Windows version

Safe resolution choices

Prefer a supported persistent Driver Verifier configuration followed by a controlled restart when the test requires options unavailable at runtime. On Windows versions that provide supported immediate rule-class commands, use the documented replacement syntax instead of forcing an obsolete volatile path. Keep the exact test plan and selected driver list under version control so the rebooted configuration is reproducible.

Do not weaken production security to make the command pass

CFG and related platform protections should not be disabled casually, especially on a production computer. Driver Verifier itself can deliberately crash the system when it detects a violation, so both verifier experiments and security-setting changes belong on disposable or recoverable test machines. If a test genuinely requires a different security posture, document that posture as part of the lab image rather than changing it ad hoc.

Logging and automation guidance

distinguish configuration rejection from a verifier-detected driver failure
store the selected flags, rule classes, driver list, and reboot requirement
stop the test pipeline when setup returns 1183 instead of claiming verification ran
collect verifier /query or equivalent runtime state after activation
restore the lab to its baseline after the test campaign

Difference from an actual verifier crash

Error 1183 is returned while configuring Driver Verifier. A later bug check such as DRIVER_VERIFIER_DETECTED_VIOLATION indicates that verification was active and detected driver behavior. Treating setup failure as a passed test would leave the driver unverified.

Example

A CI job attempts verifier /volatile with a flag that the current Windows 11 image does not allow in that security state. The command returns 1183. The job records the environment, configures the required boot-time verifier flags, restarts the disposable VM, confirms the active settings, and then runs the driver workload.

References

Looking for a different code? Search another status or error code.