Fix NS_E_DRM_MUST_APPROVE (0XC00D28A6) – Windows Media Player DRM erro

This error hits when Windows Media Player can't play protected content because it hasn't been approved for DRM. It usually happens after a clean Windows install or when the DRM database gets corrupted.

When does this error show up?

You're trying to play a protected WMA or WMV file—maybe a purchased download, a subscription track from a decade-old service, or even a DVD rip with DRM intact. Windows Media Player (WMP) stops dead with NS_E_DRM_MUST_APPROVE (0XC00D28A6): “The client must be approved before executing the intended operation.”

I see this most often after a clean install of Windows 10 or 11, or when someone moved their media library to a new PC without transferring the DRM licenses. It also pops up if the DRM database got corrupted by a crash or a failed Windows update.

What's actually going on?

Windows Media Player uses a local DRM (Digital Rights Management) subsystem called the Individualization service. When you first play a protected file, WMP reaches out to Microsoft's servers to “approve” your copy of the player. That approval gives you a unique license tied to your machine's hardware.

The error means WMP can't find that approval record—or the record is damaged. It's not a network issue or a password problem. It's a missing or busted file in the DRM store under %ProgramData%\Microsoft\Windows\DRM.

Fix 1: Reset the DRM database

This is the real fix. Skip the “run WMP as admin” nonsense—that only helps if permissions are the root cause, which they almost never are here.

Close Windows Media Player completely. Check the system tray to make sure it's not minimized.
Open File Explorer and paste this into the address bar:
```
%ProgramData%\Microsoft\Windows\DRM
```
If you see a folder called DRM, right-click it and select Properties → Security → Advanced. Note the owner (should be SYSTEM). If you get a permission error trying to open it, you'll need to take ownership first—see step 4.
Delete everything inside the DRM folder. Not the folder itself, just the files inside it. You'll likely see files named drmstore.hds, drmv2.lic, and a few others. Select all, delete. If Windows says they're in use, reboot into Safe Mode (press Shift + Restart from the login screen) and try again.
Reboot normally. Open WMP and play that protected file again. WMP will redownload the approval—it'll briefly show “Acquiring license” or “Individualizing…” and then play.

Fix 2: Force a re-individualization

If the above doesn't work, the DRM store might be locked or partially corrupted. Nuke it entirely:

Press Win + R, type services.msc, press Enter.
Find Windows Media Player Network Sharing Service (if it's running, stop it).
Now go back to the DRM folder and delete everything again. This time also delete the folder itself if Windows lets you. If not, use a tool like Unlocker or boot from a USB drive to delete it.
Reboot. WMP will create a fresh DRM folder on next start.

Fix 3: Check system file integrity

Sometimes a corrupted system file blocks DRM approval. Run these two commands in an admin Command Prompt:

sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth

Let both finish. Reboot, then try playing the file again.

What if it still fails?

Is your date/time correct? DRM licenses check the system clock. If your PC is set to 2015, Microsoft's servers won't approve it.
Are you behind a corporate proxy or firewall? The individualization service uses ports 80 and 443 to talk to drmlicense.one.microsoft.com. If your network blocks that, you're stuck. Try on a phone hotspot as a test.
Is the file itself dead? Some older DRM stores are no longer supported. If you bought the track from a now-defunct service (like Yahoo! Music Store or MSN Music), the license server is gone. No fix for that—rip the file or buy it again DRM-free.

This error is a relic from a time when DRM was more aggressive. On modern Windows 10/11 with updated WMP, the reset always works for me. Give it a shot.