DRM Root of Trust Error 0xC00D2780: Real Fixes That Work

What's Actually Happening

Error 0xC00D2780 means the Digital Rights Management system on your Windows PC can't verify its own trust chain. It's not a network problem or a missing codec. Your PC has a local DRM license store, and that store is broken—corrupted files, wrong permissions, or a failed security component. This usually shows up in Windows Media Player, but can hit any app that uses Microsoft's DRM stack: Zune software, Xbox Music, or older video stores like Amazon Unbox.

The fix is to rebuild that store. Here's how, from least invasive to nuclear option.

The 30-Second Fix: Clear DRM Data from Windows Media Player

Windows Media Player has a built-in button to reset the DRM store. It doesn't always work, but it's the first thing to try because there's zero risk.

1. Open Windows Media Player.
2. Press Alt to show the menu bar (if it's hidden).
3. Go to Tools > Options > Privacy.
4. Click the Reset DRM button.
5. Restart Windows Media Player.

Why this might work: WMP creates a fresh set of DRM files when it resets. If the corruption was in a single file—like a bad license for one song—this replaces the entire store. If it fails, the corruption is deeper. Move on.

The 5-Minute Fix: Delete the DRM Store Folder Manually

WMP's reset button is hit-or-miss. Doing it by hand is more reliable because you're guaranteed to remove every stale file.

1. Close Windows Media Player and any app using DRM.
2. Open File Explorer and type %userprofile%\AppData\Local\Microsoft\DRM into the address bar, then press Enter.
3. Select all files in that folder (Ctrl+A) and delete them. You might get a permission error on a file called drmstore.hds—that's normal. Skip any you can't delete.
4. Now navigate to %userprofile%\AppData\Local\Microsoft\Media Player and delete everything in there too.
5. Restart Windows Media Player and try playing the content again.

Why this works: Both folders hold license files and database caches. Deleting them forces Windows to rebuild the entire DRM root of trust from scratch the next time you play DRM-protected content. It's the same as a full reset but without relying on WMP's sometimes-buggy internal routine.

Heads up: You'll need to re-download licenses for any previously purchased content. That's by design—DRM stores identify you by your machine's current state. If you have a lot of old purchased music, make sure you still have access to the store where you bought it.

The 15+ Minute Fix: System File Checker and DISM

If the manual delete didn't help, the DRM system files themselves might be damaged. Windows has two repair tools: SFC (System File Checker) and DISM (Deployment Imaging Servicing and Management). Run them in order.

1. Open Command Prompt as Administrator. Press Win+X, then choose Command Prompt (Admin) or Terminal (Admin) on Windows 11.
2. Run sfc /scannow. This checks for corrupted system files and replaces them from a cached copy. Let it finish—it takes 5-15 minutes depending on your drive speed.
3. If SFC reports errors but can't fix them, run DISM /Online /Cleanup-Image /RestoreHealth. This repairs the system image that SFC uses as its source. It needs internet access to pull fresh files from Microsoft's servers.
4. Reboot, then try the DRM content again.

Why this order matters: SFC is the first line of defense—it fixes individual system files. DISM fixes the underlying component store that SFC depends on. Running them in reverse (DISM then SFC) works too, but doing SFC first might save you a long DISM scan if SFC catches the issue.

If neither tool finds problems, the corruption isn't in system files—it's in the DRM store you already deleted. That means the fix from the 5-minute section should have worked. Reboot and try again; sometimes Windows needs a cold start to reinitialize the DRM service.

When to Give Up and Reinstall Windows

Honestly, this error is rare on clean Windows installs. If you've done all three steps and it's still failing, something is fundamentally broken in your user profile or the Windows installation itself. Before nuking everything, create a new local user account and test DRM playback there. If it works, migrate your data to the new profile. If it doesn't, a repair install (in-place upgrade) is your next step—it keeps your files and apps but replaces the OS core files.

I've only seen this error persist past the manual delete step once, on a machine that had been upgraded from Windows 7 through 8.1 to 10 without a clean install. The DRM stack had accumulated so much legacy garbage that no amount of deleting files helped. A clean Windows 10 install fixed it instantly.