Fix NS_E_DRM_SECURITY_COMPONENT_SIGNATURE_INVALID (0XC00D2760)

Start here — 30-second fix

Most of the time, this error pops up after a Windows Update or a Media Player crash. The DRM files got mangled mid-write. First thing to try: clear the DRM folder. It's safe — Windows rebuilds it on the next play.

1. Close any Media Player or app using DRM (like Netflix on PC).
2. Press Win + R, type %windir%\system32\CatRoot, hit Enter.
3. Delete everything inside that folder. Yes, all of it. Don't worry — Windows rebuilds it.
4. Reboot your machine.

Test it. Open Windows Media Player and try to play a DRM-protected file (like a purchased music track or a Netflix movie in browser that uses Silverlight). If the error's gone, you're done. If not, move on.

Moderate fix — 5 minutes

If the quick nuke didn't work, the issue is likely in the DRM individualization store. Microsoft's DRM system downloads a unique certificate per machine, and that certificate can get corrupted. Here's the real fix:

1. Open Services (services.msc). Stop Windows Media Player Network Sharing Service and any related DRM services.
2. Open File Explorer, paste %programdata%\Microsoft\Windows\DRM into the address bar, hit Enter.
3. Delete everything in that folder. Don't skip files — delete them all.
4. Now re-register the core DRM DLLs. Open Command Prompt as Administrator. Run these one at a time:

   regsvr32 /u msnetobj.dll
   regsvr32 /u wmp.dll
   regsvr32 msnetobj.dll
   regsvr32 wmp.dll

   You'll see a confirmation for each. Ignore any “module loaded but entry point not found” warnings — that's normal for some Windows 10 builds.
5. Reboot.

This forces the DRM system to re-download fresh certificates from Microsoft's servers on the next play. If you're behind a corporate proxy or strict firewall, the download might fail. Temporarily disable any ad-blocking or privacy software (like VPNs or Pi-hole) during the test.

Advanced fix — 15+ minutes

This one's for the stubborn cases. The error 0XC00D2760 sometimes means a deeper system file corruption or a botched Windows Update that left DRM in a half-installed state. Here's the full sweep:

Step 1: Run System File Checker and DISM

1. Open Command Prompt as Administrator.
2. Run sfc /scannow. Let it finish — takes 10-15 minutes.
3. If it finds corrupt files it can't fix, run DISM /Online /Cleanup-Image /RestoreHealth. This pulls fresh system files from Windows Update.
4. Reboot after DISM completes.

Step 2: Reinstall Windows Media Player Features

On Windows 10/11, you can't fully uninstall Media Player, but you can toggle it off and on:

1. Go to Control Panel > Programs and Features > Turn Windows features on or off.
2. Uncheck Media Features (or Windows Media Player on older builds). Click OK, reboot.
3. Go back and re-check it. Reboot again.

Step 3: Manual DRM Certificate Reset

If the error still shows, Microsoft's DRM individualization might have a rotten certificate in the registry. This is rare but nasty.

1. Open Regedit as Administrator.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DRM.
3. Delete the SecureTime and LicenseServer subkeys if they exist. Backup the key first — right-click, Export.
4. Close Regedit, reboot.

Step 4: Windows Update Rollback

If the error started after a specific update, uninstall it. Go to Settings > Update & Security > View update history > Uninstall updates. Look for the most recent update. Right-click and uninstall. Reboot.

When to give up and use an alternative

If you've tried all three sections and the error still laughs at you, consider this: Windows Media Player is legacy software. On Windows 10 and 11, it's been replaced by the Films & TV app (which uses a different DRM stack) and Groove Music. For DRM-protected content, try VLC Media Player (it ignores most DRM) or use a browser-based player. The error 0XC00D2760 is a sign that the old DRM system is past its prime.

Note for corporate environments: This error often shows up on machines with WSUS delay or proxy servers blocking the DRM individualization server (drm.licensing.microsoft.com). Whitelist that URL if you can. You'll save your helpdesk hours.