System Error Codes (9000-11999)
The System Error Codes are very broad. Each one can occur in one of many hundreds of locations in the system. Consequently the descriptions of these codes cannot be very specific. Use of these codes requires some amount of investigation and analysis. You need to note both the programmatic and the run-time context in which these errors occur. Because these codes are defined in WinError.h for anyone to use, sometimes the codes are returned by non-system software. Sometimes the code is returned by a function deep in the stack and far removed from your code that is handling the error.
The following list describes system error codes (errors 9000 to 11999). They are returned by the GetLastError function when many functions fail. To retrieve the description text for the error in your application, use the FormatMessage function with the FORMAT_MESSAGE_FROM_SYSTEM flag.
9001 (0x2329) - DNS server unable to interpret format.
9002 (0x232A) - DNS server failure.
9003 (0x232B) - DNS name does not exist.
9004 (0x232C) - DNS request not supported by name server.
9005 (0x232D) - DNS operation refused.
9006 (0x232E) - DNS name that ought not exist, does exist.
9007 (0x232F) - DNS RR set that ought not exist, does exist.
9008 (0x2330) - DNS RR set that ought to exist, does not exist.
9009 (0x2331) - DNS server not authoritative for zone.
9010 (0x2332) - DNS name in update or prereq is not in zone.
9016 (0x2338) - DNS signature failed to verify.
9017 (0x2339) - DNS bad key.
9018 (0x233A) - DNS signature validity expired.
9101 (0x238D) - Only the DNS server acting as the key master for the zone may perform this operation.
9102 (0x238E) - This operation is not allowed on a zone that is signed or has signing keys.
9103 (0x238F) - NSEC3 is not compatible with the RSA-SHA-1 algorithm. Choose a different algorithm or use NSEC. This value was also named DNS_ERROR_INVALID_NSEC3_PARAMETERS
9104 (0x2390) - The zone does not have enough signing keys. There must be at least one key signing key (KSK) and at least one zone signing key (ZSK).
9105 (0x2391) - The specified algorithm is not supported.
9106 (0x2392) - The specified key size is not supported.
9107 (0x2393) - One or more of the signing keys for a zone are not accessible to the DNS server. Zone signing will not be operational until this error is resolved.
9108 (0x2394) - The specified key storage provider does not support DPAPI++ data protection. Zone signing will not be operational until this error is resolved.
9109 (0x2395) - An unexpected DPAPI++ error was encountered. Zone signing will not be operational until this error is resolved.
9110 (0x2396) - An unexpected crypto error was encountered. Zone signing may not be operational until this error is resolved.
9111 (0x2397) - The DNS server encountered a signing key with an unknown version. Zone signing will not be operational until this error is resolved.
9112 (0x2398) - The specified key service provider cannot be opened by the DNS server.
9113 (0x2399) - The DNS server cannot accept any more signing keys with the specified algorithm and KSK flag value for this zone.
9114 (0x239A) - The specified rollover period is invalid.
9115 (0x239B) - The specified initial rollover offset is invalid.
9116 (0x239C) - The specified signing key is already in process of rolling over keys.
9117 (0x239D) - The specified signing key does not have a standby key to revoke.
9118 (0x239E) - This operation is not allowed on a zone signing key (ZSK).
9119 (0x239F) - This operation is not allowed on an active signing key.
9120 (0x23A0) - The specified signing key is already queued for rollover.
9121 (0x23A1) - This operation is not allowed on an unsigned zone.
9122 (0x23A2) - This operation could not be completed because the DNS server listed as the current key master for this zone is down or misconfigured. Resolve the problem on the current key master for this zone or use another DNS server to seize the key master role.
9123 (0x23A3) - The specified signature validity period is invalid.
9124 (0x23A4) - The specified NSEC3 iteration count is higher than allowed by the minimum key length used in the zone.
9125 (0x23A5) - This operation could not be completed because the DNS server has been configured with DNSSEC features disabled. Enable DNSSEC on the DNS server.
9126 (0x23A6) - This operation could not be completed because the XML stream received is empty or syntactically invalid.
9127 (0x23A7) - This operation completed, but no trust anchors were added because all of the trust anchors received were either invalid, unsupported, expired, or would not become valid in less than 30 days.
9128 (0x23A8) - The specified signing key is not waiting for parental DS update.
9129 (0x23A9) - Hash collision detected during NSEC3 signing. Specify a different user-provided salt, or use a randomly generated salt, and attempt to sign the zone again.
9130 (0x23AA) - NSEC is not compatible with the NSEC3-RSA-SHA-1 algorithm. Choose a different algorithm or use NSEC3.
9501 (0x251D) - No records found for given DNS query.
9502 (0x251E) - Bad DNS packet.
9503 (0x251F) - No DNS packet.
9504 (0x2520) - DNS error, check rcode.
9505 (0x2521) - Unsecured DNS packet.
9506 (0x2522) - DNS query request is pending.
9551 (0x254F) - Invalid DNS type.
9552 (0x2550) - Invalid IP address.
9553 (0x2551) - Invalid property.
9554 (0x2552) - Try DNS operation again later.
9555 (0x2553) - Record for given name and type is not unique.
9556 (0x2554) - DNS name does not comply with RFC specifications.
9557 (0x2555) - DNS name is a fully-qualified DNS name.
9558 (0x2556) - DNS name is dotted (multi-label).
9559 (0x2557) - DNS name is a single-part name.
9560 (0x2558) - DNS name contains an invalid character.
9561 (0x2559) - DNS name is entirely numeric.
9562 (0x255A) - The operation requested is not permitted on a DNS root server.
9563 (0x255B) - The record could not be created because this part of the DNS namespace has been delegated to another server.
9564 (0x255C) - The DNS server could not find a set of root hints.
9565 (0x255D) - The DNS server found root hints but they were not consistent across all adapters.
9566 (0x255E) - The specified value is too small for this parameter.
9567 (0x255F) - The specified value is too large for this parameter.
9568 (0x2560) - This operation is not allowed while the DNS server is loading zones in the background. Please try again later.
9569 (0x2561) - The operation requested is not permitted on against a DNS server running on a read-only DC.
9570 (0x2562) - No data is allowed to exist underneath a DNAME record.
9571 (0x2563) - This operation requires credentials delegation.
9572 (0x2564) - Name resolution policy table has been corrupted. DNS resolution will fail until it is fixed. Contact your network administrator.
9601 (0x2581) - DNS zone does not exist.
9602 (0x2582) - DNS zone information not available.
9603 (0x2583) - Invalid operation for DNS zone.
9604 (0x2584) - Invalid DNS zone configuration.
9605 (0x2585) - DNS zone has no start of authority (SOA) record.
9606 (0x2586) - DNS zone has no Name Server (NS) record.
9607 (0x2587) - DNS zone is locked.
9608 (0x2588) - DNS zone creation failed.
9609 (0x2589) - DNS zone already exists.
9610 (0x258A) - DNS automatic zone already exists.
9611 (0x258B) - Invalid DNS zone type.
9612 (0x258C) - Secondary DNS zone requires master IP address.
9613 (0x258D) - DNS zone not secondary.
9614 (0x258E) - Need secondary IP address.
9615 (0x258F) - WINS initialization failed.
9616 (0x2590) - Need WINS servers.
9617 (0x2591) - NBTSTAT initialization call failed.
9618 (0x2592) - Invalid delete of start of authority (SOA).
9619 (0x2593) - A conditional forwarding zone already exists for that name.
9620 (0x2594) - This zone must be configured with one or more master DNS server IP addresses.
9621 (0x2595) - The operation cannot be performed because this zone is shut down.
9622 (0x2596) - This operation cannot be performed because the zone is currently being signed. Please try again later.
9651 (0x25B3) - Primary DNS zone requires datafile.
9652 (0x25B4) - Invalid datafile name for DNS zone.
9653 (0x25B5) - Failed to open datafile for DNS zone.
9654 (0x25B6) - Failed to write datafile for DNS zone.
9655 (0x25B7) - Failure while reading datafile for DNS zone.
9701 (0x25E5) - DNS record does not exist.
9702 (0x25E6) - DNS record format error.
9703 (0x25E7) - Node creation failure in DNS.
9704 (0x25E8) - Unknown DNS record type.
9705 (0x25E9) - DNS record timed out.
9706 (0x25EA) - Name not in DNS zone.
9707 (0x25EB) - CNAME loop detected.
9708 (0x25EC) - Node is a CNAME DNS record.
9709 (0x25ED) - A CNAME record already exists for given name.
9710 (0x25EE) - Record only at DNS zone root.
9711 (0x25EF) - DNS record already exists.
9712 (0x25F0) - Secondary DNS zone data error.
9713 (0x25F1) - Could not create DNS cache data.
9714 (0x25F2) - DNS name does not exist.
9715 (0x25F3) - Could not create pointer (PTR) record.
9716 (0x25F4) - DNS domain was undeleted.
9717 (0x25F5) - The directory service is unavailable.
9718 (0x25F6) - DNS zone already exists in the directory service.
9719 (0x25F7) - DNS server not creating or reading the boot file for the directory service integrated DNS zone.
9720 (0x25F8) - Node is a DNAME DNS record.
9721 (0x25F9) - A DNAME record already exists for given name.
9722 (0x25FA) - An alias loop has been detected with either CNAME or DNAME records.
9751 (0x2617) - DNS AXFR (zone transfer) complete.
9752 (0x2618) - DNS zone transfer failed.
9753 (0x2619) - Added local WINS server.
9801 (0x2649) - Secure update call needs to continue update request.
9851 (0x267B) - TCP/IP network protocol not installed.
9852 (0x267C) - No DNS servers configured for local system.
9901 (0x26AD) - The specified directory partition does not exist.
9902 (0x26AE) - The specified directory partition already exists.
9903 (0x26AF) - This DNS server is not enlisted in the specified directory partition.
9904 (0x26B0) - This DNS server is already enlisted in the specified directory partition.
9905 (0x26B1) - The directory partition is not available at this time. Please wait a few minutes and try again.
9906 (0x26B2) - The operation failed because the domain naming master FSMO role could not be reached. The domain controller holding the domain naming master FSMO role is down or unable to service the request or is not running Windows Server 2003 or later.
10004 (0x2714) - A blocking operation was interrupted by a call to WSACancelBlockingCall.
10009 (0x2719) - The file handle supplied is not valid.
10013 (0x271D) - An attempt was made to access a socket in a way forbidden by its access permissions.
10014 (0x271E) - The system detected an invalid pointer address in attempting to use a pointer argument in a call.
10022 (0x2726) - An invalid argument was supplied.
10024 (0x2728) - Too many open sockets.
10035 (0x2733) - A non-blocking socket operation could not be completed immediately.
10036 (0x2734) - A blocking operation is currently executing.
10037 (0x2735) - An operation was attempted on a non-blocking socket that already had an operation in progress.
10038 (0x2736) - An operation was attempted on something that is not a socket.
10039 (0x2737) - A required address was omitted from an operation on a socket.
10040 (0x2738) - A message sent on a datagram socket was larger than the internal message buffer or some other network limit, or the buffer used to receive a datagram into was smaller than the datagram itself.
10041 (0x2739) - A protocol was specified in the socket function call that does not support the semantics of the socket type requested.
10042 (0x273A) - An unknown, invalid, or unsupported option or level was specified in a getsockopt or setsockopt call.
10043 (0x273B) - The requested protocol has not been configured into the system, or no implementation for it exists.
10044 (0x273C) - The support for the specified socket type does not exist in this address family.
10045 (0x273D) - The attempted operation is not supported for the type of object referenced.
10046 (0x273E) - The protocol family has not been configured into the system or no implementation for it exists.
10047 (0x273F) - An address incompatible with the requested protocol was used.
10048 (0x2740) - Only one usage of each socket address (protocol/network address/port) is normally permitted.
10049 (0x2741) - The requested address is not valid in its context.
10050 (0x2742) - A socket operation encountered a dead network.
10051 (0x2743) - A socket operation was attempted to an unreachable network.
10052 (0x2744) - The connection has been broken due to keep-alive activity detecting a failure while the operation was in progress.
10053 (0x2745) - An established connection was aborted by the software in your host machine.
10054 (0x2746) - An existing connection was forcibly closed by the remote host.
10055 (0x2747) - An operation on a socket could not be performed because the system lacked sufficient buffer space or because a queue was full.
10056 (0x2748) - A connect request was made on an already connected socket.
10057 (0x2749) - A request to send or receive data was disallowed because the socket is not connected and (when sending on a datagram socket using a sendto call) no address was supplied.
10058 (0x274A) - A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call.
10059 (0x274B) - Too many references to some kernel object.
10060 (0x274C) - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
10061 (0x274D) - No connection could be made because the target machine actively refused it.
10062 (0x274E) - Cannot translate name.
10063 (0x274F) - Name component or name was too long.
10064 (0x2750) - A socket operation failed because the destination host was down.
10065 (0x2751) - A socket operation was attempted to an unreachable host.
10066 (0x2752) - Cannot remove a directory that is not empty.
10067 (0x2753) - A Windows Sockets implementation may have a limit on the number of applications that may use it simultaneously.
10068 (0x2754) - Ran out of quota.
10069 (0x2755) - Ran out of disk quota.
10070 (0x2756) - File handle reference is no longer available.
10071 (0x2757) - Item is not available locally.
10091 (0x276B) - WSAStartup cannot function at this time because the underlying system it uses to provide network services is currently unavailable.
10092 (0x276C) - The Windows Sockets version requested is not supported.
10093 (0x276D) - Either the application has not called WSAStartup, or WSAStartup failed.
10101 (0x2775) - Returned by WSARecv or WSARecvFrom to indicate the remote party has initiated a graceful shutdown sequence.
10102 (0x2776) - No more results can be returned by WSALookupServiceNext.
10103 (0x2777) - A call to WSALookupServiceEnd was made while this call was still processing. The call has been canceled.
10104 (0x2778) - The procedure call table is invalid.
10105 (0x2779) - The requested service provider is invalid.
10106 (0x277A) - The requested service provider could not be loaded or initialized.
10107 (0x277B) - A system call has failed.
10108 (0x277C) - No such service is known. The service cannot be found in the specified name space.
10109 (0x277D) - The specified class was not found.
10110 (0x277E) - No more results can be returned by WSALookupServiceNext.
10111 (0x277F) - A call to WSALookupServiceEnd was made while this call was still processing. The call has been canceled.
10112 (0x2780) - A database query failed because it was actively refused.
11001 (0x2AF9) - No such host is known.
11002 (0x2AFA) - This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server.
11003 (0x2AFB) - A non-recoverable error occurred during a database lookup.
11004 (0x2AFC) - The requested name is valid, but no data of the requested type was found.
11005 (0x2AFD) - At least one reserve has arrived.
11006 (0x2AFE) - At least one path has arrived.
11007 (0x2AFF) - There are no senders.
11008 (0x2B00) - There are no receivers.
11009 (0x2B01) - Reserve has been confirmed.
11010 (0x2B02) - Error due to lack of resources.
11011 (0x2B03) - Rejected for administrative reasons - bad credentials.
11012 (0x2B04) - Unknown or conflicting style.
11013 (0x2B05) - Problem with some part of the filterspec or providerspecific buffer in general.
11014 (0x2B06) - Problem with some part of the flowspec.
11015 (0x2B07) - General QOS error.
11016 (0x2B08) - An invalid or unrecognized service type was found in the flowspec.
11017 (0x2B09) - An invalid or inconsistent flowspec was found in the QOS structure.
11018 (0x2B0A) - Invalid QOS provider-specific buffer.
11019 (0x2B0B) - An invalid QOS filter style was used.
11020 (0x2B0C) - An invalid QOS filter type was used.
11021 (0x2B0D) - An incorrect number of QOS FILTERSPECs were specified in the FLOWDESCRIPTOR.
11022 (0x2B0E) - An object with an invalid ObjectLength field was specified in the QOS provider-specific buffer.
11023 (0x2B0F) - An incorrect number of flow descriptors was specified in the QOS structure.
11024 (0x2B10) - An unrecognized object was found in the QOS provider-specific buffer.
11025 (0x2B11) - An invalid policy object was found in the QOS provider-specific buffer.
11026 (0x2B12) - An invalid QOS flow descriptor was found in the flow descriptor list.
11027 (0x2B13) - An invalid or inconsistent flowspec was found in the QOS provider specific buffer.
11028 (0x2B14) - An invalid FILTERSPEC was found in the QOS provider-specific buffer.
11029 (0x2B15) - An invalid shape discard mode object was found in the QOS provider specific buffer.
11030 (0x2B16) - An invalid shaping rate object was found in the QOS provider-specific buffer.
11031 (0x2B17) - A reserved policy element was found in the QOS provider-specific buffer.
11032 (0x2B18) - No such host is known securely.
11033 (0x2B19) - Name based IPSEC policy could not be added.