What does Windows error code 13003 (ERROR_IPSEC_MM_POLICY_EXISTS) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The requested legacy IPsec Main Mode policy object already exists.

Previous	Next
ERROR_IPSEC_QM_POLICY_IN_USE	ERROR_IPSEC_MM_POLICY_NOT_FOUND

ERROR_IPSEC_MM_POLICY_EXISTS

ERROR_IPSEC_MM_POLICY_EXISTS (0x000032CB) This code is returned while a management tool attempts to create a legacy Main Mode policy object whose identity is already present. It is a configuration-object conflict, not evidence that an IKE negotiation itself failed.

What to check

List the existing Main Mode rules and confirm whether the same rule was created by Group Policy, a local policy, or deployment automation.
Do not create a duplicate solely to change one setting. Update the intended policy object or remove an obsolete local object only after confirming it is not managed by GPO.
Check the deployment script for non-idempotent create operations, especially after retries or partial rollback.

Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.