Error map

0x800704EC 0x800704EC: This program is blocked by group policy (Windows Defender)

Windows · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

0x800704EC — 0x800704EC: This program is blocked by group policy (Windows Defender) (Windows)0x800704ECis damaged and can’t be opened — macOS: “App” is damaged and can’t be opened. You should move it to the Trash. (macOS)is damaged and can’…0x80070005 — Windows Error 0x80070005 (E_ACCESSDENIED): Access is denied (Windows)0x80070005AADSTS50053 — AADSTS50053: Your account is locked (Smart Lockout) / sign-in blocked due to suspicious activity (Azure)AADSTS50053403 Forbidden wp-admin — WordPress: 403 Forbidden on wp-admin, wp-login.php or admin-ajax.php (WordPress)403 Forbidden wp-ad…Windows protected your PC — Windows protected your PC — Microsoft Defender SmartScreen prevented an unrecognized app from starting (Windows)Windows protected y…0x80070422 — Windows Update error 0x80070422 (service is disabled) (Windows)0x80070422CredSSP encryption oracle remediation — Remote Desktop: An authentication error has occurred. The function requested is not supported. This could be due to CredSSP encryption oracle remediation (Windows)CredSSP encryption …SecurityException: Permission Denial — java.lang.SecurityException: Permission Denial ... requires android.permission.X (Android)SecurityException: …running scripts is disabled — File cannot be loaded because running scripts is disabled on this system (PowerShell execution policy) (Windows)running scripts is …invalid algorithm — JWT error: invalid algorithm / The specified alg value is not allowed / jwt signature is required (Authentication)invalid algorithmantiforgery token could not be decrypted — ASP.NET Core: The antiforgery token could not be decrypted / The required antiforgery cookie is not present (400 Bad Request) (.NET)antiforgery token c…invalid csrf token — ForbiddenError: invalid csrf token (EBADCSRFTOKEN) (Authentication)invalid csrf tokenwebhook signature — Webhook signature verification failed (Stripe, Razorpay, GitHub…) (API)webhook signatureviolates PodSecurity — Error creating: pods is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false ... (Kubernetes)violates PodSecurityREMOTE HOST IDENTIFICATION HAS CHANGED — WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed) (Linux)REMOTE HOST IDENTIF…EACCES — Linux: Permission denied (Linux)EACCES403 — HTTP 403 Forbidden (HTTP)4030x80070002 — Windows Error 0x80070002: The system cannot find the file specified (Windows)0x80070002NO_PUBKEY — The following signatures couldn't be verified because the public key is not available: NO_PUBKEY (Linux)NO_PUBKEYavc: denied — SELinux is preventing ... / avc: denied { read } for pid=... (permission denied despite correct permissions) (Linux)avc: deniedAADSTS50126 — AADSTS50126: Error validating credentials due to invalid username or password (Azure)AADSTS50126Not allowed — WordPress: Sorry, you are not allowed to access this page. (WordPress)Not allowed1020 — Cloudflare Error 1020: Access Denied (Cloudflare)1020Primary script unknown — FastCGI sent in stderr: "Primary script unknown" (PHP)Primary script unkn…No signing certificate — Xcode: No signing certificate "iOS Development" found (iOS)No signing certific…1005 — Cloudflare Error 1005: Access denied — The owner of this website has banned the autonomous system number (ASN) your IP address is in (Cloudflare)1005This app can't run on your PC — This app can't run on your PC — To find a version for your PC, check with the software publisher (Windows)This app can't run …0x80070643 — Windows Error 0x80070643: Fatal error during installation (Windows)0x80070643no endpoints — Service has no endpoints (no endpoints available for service / Endpoints: <none>) (Kubernetes)no endpointsprovided port is not in the valid range — spec.ports[0].nodePort: Invalid value: 80: provided port is not in the valid range. The range of valid ports is 30000-32767 (Kubernetes)provided port is no…trust relationship failed — The trust relationship between this workstation and the primary domain failed (Windows)trust relationship …EACCES — npm ERR! code EACCES — permission denied (npm)EACCESdaemon — Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? (Docker)daemoninvalid_scope — OAuth 2.0 Error: invalid_scope / insufficient_scope (Authentication)invalid_scopecommand not found — bash: command not found (Linux)command not foundTokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrorinvalid_token — invalid_token: The access token is invalid (JsonWebTokenError: invalid signature / jwt malformed) (Authentication)invalid_token1006 — Cloudflare Error 1006 / 1007 / 1008: Access denied — Your IP address has been banned (Cloudflare)1006419 Page Expired — Laravel: 419 Page Expired (CSRF token mismatch) (PHP)419 Page ExpiredDjango CSRF — Forbidden (403) CSRF verification failed. Request aborted. (Python)Django CSRF1009 — Cloudflare Error 1009: Access denied — The owner of this website has banned the country or region your IP address is in (Cloudflare)1009ExpiredToken — AWS: ExpiredToken — The security token included in the request is expired (AWS)ExpiredToken401 — HTTP 401 Unauthorized (HTTP)401session_start() — Warning: session_start(): Session cannot be started after headers have already been sent (PHP)session_start()

Directly related (12)

is damaged and can’t be openedmacOS

macOS: “App” is damaged and can’t be opened. You should move it to the Trash.

Gatekeeper blocked an app that isn’t properly signed/notarized or was modified after download (quarantine attribute).

0x80070005Windows

Windows Error 0x80070005 (E_ACCESSDENIED): Access is denied

Windows refused an operation because the account or process lacks permission — seen in Windows Update, installers, Task Scheduler…

AADSTS50053Azure

AADSTS50053: Your account is locked (Smart Lockout) / sign-in blocked due to suspicious activity

Too many failed sign-ins (or sign-ins from a malicious IP) triggered Entra Smart Lockout.

403 Forbidden wp-adminWordPress

WordPress: 403 Forbidden on wp-admin, wp-login.php or admin-ajax.php

The server or a security layer refused access to WordPress admin URLs — file permissions, a security plugin/WAF rule, ModSecurity…

Windows protected your PCWindows

Windows protected your PC — Microsoft Defender SmartScreen prevented an unrecognized app from starting

SmartScreen blocked an app that’s unsigned or new/rare (no download reputation yet).

0x80070422Windows

Windows Update error 0x80070422 (service is disabled)

Windows Update (or the Microsoft Store/Defender) can’t run because a required service — usually Windows Update (wuauserv) — is di…

CredSSP encryption oracle remediationWindows

Remote Desktop: An authentication error has occurred. The function requested is not supported. This could be due to CredSSP encryption oracle remediation

The RDP client and server disagree on CredSSP security updates — one side is patched and enforcing, the other isn’t.

SecurityException: Permission DenialAndroid

java.lang.SecurityException: Permission Denial ... requires android.permission.X

The app called an API that needs a permission it hasn’t declared or the user hasn’t granted at runtime.

running scripts is disabledWindows

File cannot be loaded because running scripts is disabled on this system (PowerShell execution policy)

PowerShell’s execution policy blocks .ps1 scripts — including npm/yarn/pnpm shims like npm.ps1.

invalid algorithmAuthentication

JWT error: invalid algorithm / The specified alg value is not allowed / jwt signature is required

The token’s alg header doesn’t match the algorithms the verifier allows — e.g. RS256 token verified as HS256, or an unsigned (alg…

antiforgery token could not be decrypted.NET

ASP.NET Core: The antiforgery token could not be decrypted / The required antiforgery cookie is not present (400 Bad Request)

Form POST failed antiforgery validation — the token is missing, the cookie is missing, or Data Protection keys changed so old tok…

invalid csrf tokenAuthentication

ForbiddenError: invalid csrf token (EBADCSRFTOKEN)

The request’s CSRF token is missing or doesn’t match the token tied to the user’s session/cookie.

Two steps away (32)

webhook signatureAPI

Webhook signature verification failed (Stripe, Razorpay, GitHub…)

Your endpoint computed a different HMAC signature than the one the provider sent, so the webhook is rejected.

violates PodSecurityKubernetes

Error creating: pods is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false ...

The namespace enforces a Pod Security Standard (baseline/restricted) and the pod spec breaks one of its rules.

REMOTE HOST IDENTIFICATION HAS CHANGEDLinux

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed)

The server’s SSH host key differs from the one saved in ~/.ssh/known_hosts — usually because the server was rebuilt or the IP was…

EACCESLinux

Linux: Permission denied

Your user (or the service user) lacks read/write/execute permission on a file, directory or one of its parents.

403HTTP

HTTP 403 Forbidden

The server understood the request but refuses to authorize it — you (or the server process) are not allowed to access this resour…

0x80070002Windows

Windows Error 0x80070002: The system cannot find the file specified

A file or registry entry Windows expected is missing — common in Windows Update, backups and app installs.

NO_PUBKEYLinux

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY

apt can’t verify a repository’s signature because the repo’s signing key isn’t installed (or has expired/rotated).

avc: deniedLinux

SELinux is preventing ... / avc: denied { read } for pid=... (permission denied despite correct permissions)

SELinux blocked the access — file permissions look fine, but the file’s security context or a boolean doesn’t allow the service t…

AADSTS50126Azure

AADSTS50126: Error validating credentials due to invalid username or password

Microsoft Entra ID (Azure AD) rejected the sign-in because the username or password is wrong — or the flow can’t use passwords fo…

Not allowedWordPress

WordPress: Sorry, you are not allowed to access this page.

Your user role lacks the capability for that admin screen — or the database table prefix / user capabilities are out of sync afte…

1020Cloudflare

Cloudflare Error 1020: Access Denied

A Cloudflare firewall/WAF custom rule blocked the request — the visitor’s IP, country, user agent or request pattern matched a bl…

Primary script unknownPHP

FastCGI sent in stderr: "Primary script unknown"

Nginx passed a script path to PHP-FPM that PHP-FPM couldn’t find — usually a wrong SCRIPT_FILENAME or root.

No signing certificateiOS

Xcode: No signing certificate "iOS Development" found

Xcode can’t find a valid code-signing certificate + private key for the selected team in your keychain.

1005Cloudflare

Cloudflare Error 1005: Access denied — The owner of this website has banned the autonomous system number (ASN) your IP address is in

The site owner blocked your network provider (ASN) — common for VPNs, cloud/data-center IPs and some mobile carriers.

This app can't run on your PCWindows

This app can't run on your PC — To find a version for your PC, check with the software publisher

The program was built for another architecture (32/64-bit, ARM) or is blocked by S mode/compatibility, or the file is corrupt.

0x80070643Windows

Windows Error 0x80070643: Fatal error during installation

An MSI-based installer or update (often Defender definitions, .NET or the WinRE update KB5034441) failed during installation.

no endpointsKubernetes

Service has no endpoints (no endpoints available for service / Endpoints: <none>)

The Service’s selector matches no ready pods, so traffic to it is refused or returns 503.

provided port is not in the valid rangeKubernetes

spec.ports[0].nodePort: Invalid value: 80: provided port is not in the valid range. The range of valid ports is 30000-32767

A NodePort Service asked for a port outside the cluster’s NodePort range (default 30000–32767).

trust relationship failedWindows

The trust relationship between this workstation and the primary domain failed

The computer’s machine account password no longer matches Active Directory, so domain logins fail.

EACCESnpm

npm ERR! code EACCES — permission denied

npm can’t write to a directory — usually global installs into a root-owned folder.

daemonDocker

Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?

The docker CLI can’t talk to the Docker engine — it isn’t running, or your user can’t access the socket.

invalid_scopeAuthentication

OAuth 2.0 Error: invalid_scope / insufficient_scope

The requested scope is unknown or not allowed for this client — or the token lacks the scope the API endpoint requires.

command not foundLinux

bash: command not found

The shell can’t find an executable with that name in any directory on your PATH.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

invalid_tokenAuthentication

invalid_token: The access token is invalid (JsonWebTokenError: invalid signature / jwt malformed)

A token was sent but the server couldn’t verify it — bad signature, malformed, revoked, or issued for another audience or environ…

1006Cloudflare

Cloudflare Error 1006 / 1007 / 1008: Access denied — Your IP address has been banned

The site owner (or a Cloudflare security setting) blocked your IP address.

419 Page ExpiredPHP

Laravel: 419 Page Expired (CSRF token mismatch)

Laravel rejected a POST because the CSRF token was missing, expired or didn’t match the session.

Django CSRFPython

Forbidden (403) CSRF verification failed. Request aborted.

Django rejected a POST because the CSRF token was missing, wrong, or the request origin isn’t trusted.

1009Cloudflare

Cloudflare Error 1009: Access denied — The owner of this website has banned the country or region your IP address is in

The site blocks visitors from your country/region.

ExpiredTokenAWS

AWS: ExpiredToken — The security token included in the request is expired

Temporary AWS credentials (STS/SSO/assumed role) have expired.

401HTTP

HTTP 401 Unauthorized

The request has no valid authentication credentials — you need to log in or send a valid token.

session_start()PHP

Warning: session_start(): Session cannot be started after headers have already been sent

session_start() ran after output was sent, so PHP can’t set the session cookie.