Configuration ManagerDeep dive

Task sequence and OS deployment error codes in Configuration Manager: a quick reference

What 0x80070002, 0x80070032, 0x80091007, 0x80040104, 0x80072EE7 and 39 more task sequence codes mean, the usual OS deployment cause and the first thing to check.

A failed task sequence leaves you one hex code in a dialog and a long smsts.log. This quick reference lists 44 codes you meet in Configuration Manager OS deployment (OSD), with the official meaning, the usual cause during a deployment and the first thing to check, grouped by where the failure happens.

Codes in this quick reference

  • 0x80004005 E_FAIL: Unspecified errorTask sequence error dialog / smsts.log
  • 0x80004004 E_ABORT: Operation aborted (logged after a failed step stops its group)smsts.log
  • 0x80040104 Failed to resolve selected task sequence dependenciessmsts.log
  • 0x80091007 The hash value is not correct.Task sequence error dialog / smsts.log
  • 0x80041002 WBEM_E_NOT_FOUND: An error occurred when loading the task sequence (MDT task sequence)TaskSequenceProvider.log
  • 0x80070002 ERROR_FILE_NOT_FOUND: The system cannot find the file specified.Task sequence error dialog / smsts.log
  • 0x80070003 ERROR_PATH_NOT_FOUND: The system cannot find the path specified.smsts.log
  • 0x80070005 ERROR_ACCESS_DENIED: Access is denied.smsts.log

+ 36 more codes in the tables below.

How this guide is organized: How to read these codes → Task sequence engine, policy and content → Files, paths and disks → Network, management point and HTTPS → Domain join (NetSetup.LOG) → How to verify a fixFlow diagram of the article's sections in reading order: 1. How to read these codes. 2. Task sequence engine, policy and content. 3. Files, paths and disks (2 parts: Files and paths; Disks and storage). 4. Network, management point and HTTPS. 5. Domain join (NetSetup.LOG). 6. How to verify a fix. Toolbox: 0x80091007, 0x80070032, 0x80072EE2, NetSetup.LOG, ipconfig /all.1How to read these codes2Task sequence engine, policyand content3Files, paths and disksFiles and pathsDisks and storage4Network, management pointand HTTPS5Domain join (NetSetup.LOG)6How to verify a fixTOOLBOX0x800910070x800700320x80072EE2NetSetup.LOGipconfig /allHow this guide is organized: How to read these codes → Task sequence engine, policy and content → Files, paths and disks → Network, management point and HTTPS → Domain join (NetSetup.LOG) → How to verify a fixFlow diagram of the article's sections in reading order: 1. How to read these codes. 2. Task sequence engine, policy and content. 3. Files, paths and disks (2 parts: Files and paths; Disks and storage). 4. Network, management point and HTTPS. 5. Domain join (NetSetup.LOG). 6. How to verify a fix. Toolbox: 0x80091007, 0x80070032, 0x80072EE2, NetSetup.LOG, ipconfig /all.1How to read these codes2Task sequence engine, policy and content3Files, paths and disksFiles and pathsDisks and storage4Network, management point and HTTPS5Domain join (NetSetup.LOG)6How to verify a fixTOOLBOX0x800910070x800700320x80072EE2NetSetup.LOGipconfig /all
At a glance: how this guide is organized · 2 steps · 5 key settings and tools

How to read these codes#

How to find what a task sequence error code meansIs it the first error above Failed to run the action in smsts.log? if No: Read further up smsts.log (The code on screen is often only the last link; 0x80004004 is never the cause.); if Yes: What does the code start with? if 0x8007: Is it between 0x80072EE2 and 0x80072F8F? if Yes: WinHTTP error reaching the MP or DP (Test the URL in smsts.log from the F8 prompt.); if No: Win32 error in HRESULT form (The last four hex digits are the Win32 code: 0x80070032 is error 50.); if 0x80004 or 0x80041: Generic COM or WMI code (0x80004005 is a generic failure passed up: read the lines above it.); if 0x80091007: Content hash mismatch (Redistribute or update that package's content, then validate it.)Is it the first error above Failedto run the action in smsts.log?NOTERead further upsmsts.logThe code on screenis often only the lastlink; 0x80004004 isnever the cause.NoWhat does the code start with?Is it between 0x80072EE2 and0x80072F8F?FIXWinHTTP errorreaching the MPor DPTest the URL insmsts.log from theF8 prompt.YesNOTEWin32 error inHRESULT formThe last four hexdigits are the Win32code: 0x80070032is error 50.No0x8007NOTEGeneric COM orWMI code0x80004005 is ageneric failurepassed up: read thelines above it.0x80004 or 0x80041FIXContent hashmismatchRedistribute orupdate thatpackage's content,then validate it.0x80091007YesHow to find what a task sequence error code meansIs it the first error above Failed to run the action in smsts.log? if No: Read further up smsts.log (The code on screen is often only the last link; 0x80004004 is never the cause.); if Yes: What does the code start with? if 0x8007: Is it between 0x80072EE2 and 0x80072F8F? if Yes: WinHTTP error reaching the MP or DP (Test the URL in smsts.log from the F8 prompt.); if No: Win32 error in HRESULT form (The last four hex digits are the Win32 code: 0x80070032 is error 50.); if 0x80004 or 0x80041: Generic COM or WMI code (0x80004005 is a generic failure passed up: read the lines above it.); if 0x80091007: Content hash mismatch (Redistribute or update that package's content, then validate it.)Is it the first error above Failed to run theaction in smsts.log?NoNOTERead further up smsts.logThe code on screen is often only the last link;0x80004004 is never the cause.YesWhat does the code start with?0x8007Is it between 0x80072EE2 and0x80072F8F?YesFIXWinHTTP error reaching the MP or DPTest the URL in smsts.log from the F8prompt.NoNOTEWin32 error in HRESULT formThe last four hex digits are the Win32 code:0x80070032 is error 50.0x80004 or 0x80041NOTEGeneric COM or WMI code0x80004005 is a generic failure passed up: readthe lines above it.0x80091007FIXContent hash mismatchRedistribute or update that package's content,then validate it.
Figure 1 · Decision tree How to find what a task sequence error code means. Start from smsts.log, not the code on screen. Convert decimal codes to hex first; NetSetup.LOG shows Win32 codes without the 0x8007 prefix.

The code appears in three places: the error dialog (Task Sequence: <name> has failed with the error code (0x80091007)), the device's deployment status under Monitoring › Deployments, and smsts.log, where the useful lines are. The log moves between phases; the smsts.log guide lists every location and shows how to keep the device on the error with F8. Read upwards from Failed to run the action: the code on screen is often only the last link in the chain.

  • 0x8007xxxx: a Windows (Win32) error in HRESULT form. The last four hex digits are the Win32 code, so 0x80070032 is error 50, ERROR_NOT_SUPPORTED.
  • 0x80072EE2 to 0x80072F8F: WinHTTP errors 12002 to 12175, raised when the task sequence talks to a management point or distribution point over HTTP or HTTPS.
  • 0x80004xxx: generic COM codes such as E_FAIL; 0x80041xxx are WMI codes; 0x80091007 is a cryptography (hash) error.
  • NetSetup.LOG shows Win32 codes without the prefix: 0x54b there is 0x8007054B elsewhere.

The engine's summary line logs the code in decimal, for example The task sequence execution engine failed executing the action (Apply Operating System Image) in the group (Install) with the error code 2148077575. Convert it in PowerShell, or use Tools › Error Lookup in CMTrace:

PowerShell
'0x{0:X8}' -f 2148077575                            # 0x80091007
0x80070032 -band 0xFFFF                              # 50
[ComponentModel.Win32Exception]::new(50).Message     # The request is not supported.

Not covered here: PXE-E codes before Windows PE starts (see PXE boot failures) and Windows Setup codes such as 0xC1900101 from the Upgrade Operating System step (see the feature update error codes and upgrading to Windows 11).

Task sequence engine, policy and content#

CodeMeaningUsual causeFirst check
0x80004005E_FAIL: Unspecified errorA generic failure passed up by a step or by policy download. Microsoft documents it in the Task Sequence Wizard on bootable or prestaged media, with Sending with winhttp failed in smsts.logThe lines above it; for media, whether Windows PE reaches a management point
0x80004004E_ABORT: Operation abortedLogged after a failed step stops its group; never the causeThe first error above it
0x80040104Logged with Failed to resolve selected task sequence dependencies (a Configuration Manager code)A referenced package, application, driver package or image has no content on a distribution point the device may useThe package ID in smsts.log, then the task sequence's References tab and that content's status
0x80091007The hash value is not correct.Downloaded content doesn't match the hash the site recorded: changed or damaged on the distribution pointRedistribute or update that package's content, then validate it (see content distribution)
0x80041002WBEM_E_NOT_FOUND (WMI)In TaskSequenceProvider.log with An error occurred when loading the task sequence when creating an MDT task sequence: MDT classes such as BDD_UsePackage can't be loadedMicrosoft's article on this error (References)

Files, paths and disks#

Files and paths#

CodeMeaningUsual causeFirst check
0x80070002The system cannot find the file specified.Wrong file name in a command line, content that didn't download, or a tool missing from the boot imageThe expanded command line in smsts.log; the package content
0x80070003The system cannot find the path specified.A folder or drive letter that doesn't exist in this phase (Windows PE letters differ)dir the path from the F8 prompt
0x80070005Access is denied.The account used for content, a network folder or a share lacks rights, or the step writes to a protected locationThe step's account (or the network access account) and share permissions
0x80070020The process cannot access the file because it is being used by another process.A file is still locked by a process from an earlier stepProcesses still running when the step starts
0x80070057The parameter is incorrect.An invalid value in a step or variable, such as a disk number or an empty variableThe step's settings and the variables set before it
0x8007007BThe filename, directory name, or volume label syntax is incorrect.Stray quotes or characters, or a variable that didn't expand, in a pathThe command line exactly as smsts.log logs it
0x800700A1The specified path is invalid.A destination that doesn't exist yet: a partition that wasn't created, or a drive variable that isn't setThe destination of Apply Operating System or Apply Data Image
0x80070490Element not found.The step looked up something that isn't there, such as an image index, partition or deviceThe referenced item against the actual image or hardware
0x80070570The file or directory is corrupted and unreadable.Damaged image or package content, bad media or a failing diskRedistribute the content; try another disk or USB drive

Disks and storage#

CodeMeaningUsual causeFirst check
0x8007000FThe system cannot find the drive specified.No disk visible to Windows PE (missing storage driver), or the step runs before the disk is partitioneddiskpart › list disk; the boot image's storage driver (see driver management)
0x80070015The device is not ready.The disk or boot media isn't available to Windows PE, often the storage controller mode or driverFirmware storage settings and the storage driver
0x8007001FA device attached to the system is not functioning.A driver or hardware fault during a disk or driver stepThe driver package for this model; disk health
0x80070032The request is not supported.The step asked for something the device, its firmware mode or Windows PE doesn't supportThe failing step and its conditions, such as _SMSTSBootUEFI for UEFI-only steps
0x80070070There is not enough space on the disk.A partition too small for the image, cached content or user statePartition sizes in Format and Partition Disk
0x800703EDThe volume does not contain a recognized file system.The step reads a volume that isn't formatted yet, or one Windows PE can't read, such as an encrypted onediskpart › list volume; the disk's BitLocker state
0x8007045DThe request could not be performed because of an I/O device error.A failing disk, USB drive or cable, or an unsuitable storage driverAnother disk or USB drive; the storage driver
0x80070571The disk structure is corrupted and unreadable.A damaged partition table or file system from an earlier installClean the disk with Format and Partition Disk, then retry

Network, management point and HTTPS#

Network and shares#

CodeMeaningUsual causeFirst check
0x80070035The network path was not found.The server in a UNC path can't be reached: name, DNS or blocked SMBnslookup and net use from the F8 prompt
0x80070043The network name cannot be found.The server answers but the share name is wrongThe share name in the step
0x800704C3Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed.Connect to Network Folder uses a second account against a server the task sequence already connected toOne account per server, or connect by another name (FQDN)
0x800704C6The network is not present or not started.No working network adapter in Windows PE, usually a missing driveripconfig /all; the boot image's network driver
0x800704CFThe network location cannot be reached.The adapter is up but has no route yet: wrong VLAN, no DHCP lease, or a switch port not forwarding yetipconfig /all; ping the gateway
0x800705B4This operation returned because the timeout period expired.A step or its program exceeded its time-out, often waiting for inputThe step's time-out; test the command silently as SYSTEM

HTTP and HTTPS (WinHTTP)#

CodeMeaningUsual causeFirst check
0x80072EE2ERROR_WINHTTP_TIMEOUT: The request has timed out.Management point or distribution point slow or unreachable from this subnetThe URL in smsts.log, tested from the F8 prompt
0x80072EE7ERROR_WINHTTP_NAME_NOT_RESOLVED: The server name cannot be resolved.No IP address (missing network driver) or no DNS server or suffix in Windows PEipconfig /all; nslookup the server's FQDN
0x80072EFDERROR_WINHTTP_CANNOT_CONNECT: connection to the server failedA firewall blocks the port, or IIS is down on the site systemPorts 80/443 (or your custom ports) to the MP and DP
0x80072EFEERROR_WINHTTP_CONNECTION_ERROR: the connection was reset or terminated, or an incompatible SSL protocol was encounteredA TLS mismatch, or a network device resetting the sessionTLS settings on the site system; proxies or inspection in the path
0x80072F05ERROR_WINHTTP_SECURE_CERT_DATE_INVALID: a certificate is outside its validity periodWrong date or time in firmware, or an expired site system certificatedate /t and time /t at the F8 prompt
0x80072F06ERROR_WINHTTP_SECURE_CERT_CN_INVALID: the certificate CN doesn't matchThe device uses a server name that isn't on the certificateCertificate subject and SAN against the FQDN
0x80072F0CERROR_WINHTTP_CLIENT_AUTH_CERT_NEEDED: the server requests client authenticationAn HTTPS-only site system needs a client certificate the boot environment lacksThe certificate used by media or PXE (see Enhanced HTTP vs HTTPS)
0x80072F0DERROR_WINHTTP_SECURE_INVALID_CA: the chain ends in an untrusted rootThe site system certificate's root CA isn't trusted in this boot environmentThe trusted root CAs configured for the site
0x80072F78ERROR_WINHTTP_INVALID_SERVER_RESPONSE: The server response cannot be parsed.A proxy or device answered instead of the site system, or the MP returned an errorProxy settings; MP health in mpcontrol.log
0x80072F7DERROR_WINHTTP_SECURE_CHANNEL_ERROR: a secure channel (TLS) errorTLS protocol or cipher mismatch between Windows PE and the site systemTLS 1.2 on the site system; a boot image from a current ADK
0x80072F8FERROR_WINHTTP_SECURE_FAILURE: errors in the SSL certificate sent by the serverA certificate problem: the device clock, revocation checking or the chainFirmware date and time first, then CRL reachability

Domain join (NetSetup.LOG)#

Apply Network Settings only writes the join details; Windows Setup joins later, so read C:\Windows\debug\NetSetup.LOG in the new OS.

CodeMeaningUsual causeFirst check
0x5Access is denied.The join account can't create or reuse the computer object in the OUOU permissions; owner of the existing object
0x51fThere are currently no logon servers available to service the logon request.No domain controller reachable from the new OSDC connectivity and firewalls from that subnet
0x52eThe user name or password is incorrect.Wrong, expired or locked join accountThe account in Apply Network Settings
0x54bThe specified domain either does not exist or could not be contacted.DNS can't locate a domain controller, or the new OS has no network drivernslookup -type=SRV _ldap._tcp.dc._msdcs.contoso.com
0x576There is a time and/or date difference between the client and server.The firmware clock is far off, so Kerberos failsFirmware date, time and time zone

How to verify a fix#

  • Rerun the deployment on a test device. The device shows Success in Monitoring › Deployments, and the final log has no failed actions:
PowerShell
Select-String -Path 'C:\Windows\CCM\Logs\smsts*.log' -Pattern 'Failed to run the action'
# No output = no step failed
  • Content codes: the package shows Success for the device's distribution points under Monitoring › Distribution Status › Content Status.
  • Network and HTTPS codes: ipconfig /all, nslookup and the date check pass at the F8 prompt before you restart the sequence.
  • Domain join: Test-ComputerSecureChannel returns True and the computer object is in the expected OU.

References#

Written and checked against current Microsoft Learn documentation. Test changes with a pilot group before rolling them out to everyone, and if an admin center path has moved since, search for the setting name instead.

Spotted a mistake, or did this fix work differently for you? Email me or message me on LinkedIn — corrections are credited in the article.

Written by

Omer Eltayeb

M365 Subject Matter Expert, former Microsoft Cloud Solutions Architect, Microsoft Certified Trainer and Microsoft Innovative Educator Expert (2024–26) and Microsoft Elevate Educator Expert (2026–27). I share practical, step-by-step guides, study plans, scripts and toolkits for Microsoft Intune, Configuration Manager, Microsoft Entra ID, Microsoft Defender, Exchange and Microsoft 365 with the community.

Microsoft Certified Trainer (MCT) 2026Microsoft Innovative Educator Expert 2025–2026Microsoft Elevate Educator Expert 2026–2027ISC2 Certified Information Systems Security Professional (CISSP)Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)