Win32 Error to NTSTATUS Lookup

Convert a Win32 error code to its corresponding NTSTATUS codes

A single Win32 error codes can be mapped to multiple NTSTATUS codes. Many Win32 error codes are defined in winerror.h and include familiar names such as ERROR_ACCESS_DENIED or ERROR_FILE_NOT_FOUND. When the Windows kernel or a device driver encounters an error, it works with NTSTATUS codes instead. The Win32 subsystem translates between these two error spaces so that a kernel-level NTSTATUS propagates up as a recognizable Win32 error code to user-mode callers.

Understanding the mapping between Win32 errors and NTSTATUS codes is essential when debugging kernel-mode drivers: a failure seen in user space as a specific Win32 error code may correspond to one of several NTSTATUS values at the kernel level. Use the tool below to type a Win32 error name (e.g. ERROR_ACCESS_DENIED) or a numeric Win32 error code and instantly see all matching NTSTATUS codes.

  • What our customers say about us?