NS_E_DRM_UNABLE_TO_GET_DEVICE_CERT (0XC00D2772) Fix

I know how annoying this error is. You're trying to play a video or audio file you legitimately bought or rented, and Windows throws up this cryptic DRM certificate error. Let's cut straight to the fix that works 90% of the time.

The Quick Fix: Reset Your DRM Certificates

1. Close Windows Media Player and any other app that plays DRM content (like Netflix or Amazon Prime Video).
2. Open File Explorer and go to: C:\Users\YOUR_USERNAME\AppData\Local\Microsoft\Media Player. Replace YOUR_USERNAME with your actual Windows username.
3. Inside that folder, you'll see files with names like DRM_v10.1.0.0.lic and DRM_v10.1.0.0.ind. There might also be folders named DeviceCertificate and DeviceID.
4. Select all the files and folders in this Media Player folder. Don't delete the folder itself, just everything inside it.
5. Right-click and choose Delete. If Windows says some files are in use, that's fine—skip those. We'll handle them next.
6. Press Win + R, type cmd, and press Enter. This opens Command Prompt.
7. In the command prompt, type this and press Enter after each line:

   net stop "Windows Media Player Network Sharing Service"
   net stop "WMPNetworkSvc"
   cd /d "%USERPROFILE%\AppData\Local\Microsoft\Media Player"
   del /f /q *.*

8. Now restart both services:

   net start "Windows Media Player Network Sharing Service"
   net start "WMPNetworkSvc"

9. Close Command Prompt and open Windows Media Player again. Try playing the DRM file now.

After following these steps, you should see Windows Media Player rebuild the certificate files from scratch. It'll download a fresh device certificate from Microsoft's servers—this usually takes a few seconds.

Why This Works

The DRM system on your PC uses two key pieces: a device certificate (proves your PC is a valid licensed device) and an individualization certificate (ties the DRM license to your specific hardware). Error 0XC00D2772 means one of these is corrupt or missing. By deleting the local cache and restarting the services, you force Windows to re-download both from Microsoft. The real fix is resetting this pairing.

If you skip the service restart step, the old cached files might not actually refresh—that's why people get stuck. The service holds a lock on the files; you must stop it before deleting them.

When That Doesn't Work: The Less Common Fixes

Option 1: Run the DRM Certificate Recovery Tool

1. Microsoft has a dedicated tool for this. Download it from the official site: search for “Microsoft DRM Certificate Recovery Tool” (it's a small .msu update package, about 2MB).
2. Close everything, run the tool, and follow the prompts. It checks your DRM stack and re-registers components.
3. Reboot your PC after it finishes.

I've seen this tool fix cases where the manual delete didn't work because Windows Store apps were also using DRM and had corrupted the shared store.

Option 2: Re-register the DRM DLLs

1. Open Command Prompt as Administrator (right-click Start > Command Prompt (Admin)).
2. Run these commands one at a time:

   regsvr32 %systemroot%\system32\drmv2clt.dll
   regsvr32 %systemroot%\system32\drmclien.dll
   regsvr32 %systemroot%\system32\msdrm.dll

3. You should get a success message for each one. If any say “failed”, note the error—it might mean the DLL is missing entirely (which points to a deeper corruption).
4. Restart your PC.

This is a brute-force way to tell Windows “hey, these DRM components exist and work”. It's saved me a few times when the tool didn't do the trick.

Option 3: Clear the DRM Store for Windows Store Apps

If the error happens in a Windows Store app (like Netflix or Movies & TV), the DRM store is separate from Windows Media Player's.

1. Press Win + I to open Settings.
2. Go to Apps > Apps & features.
3. Find the app that's giving you the error. Click the three dots next to it and choose Advanced options.
4. Scroll down to Reset and click Reset. This clears the app's local data, including its DRM certificates.
5. Reopen the app and sign in again. It'll pull a fresh certificate.

Prevention: Keep This From Coming Back

Once you've fixed it, here's how to avoid a repeat:

• Don't use system cleaners that delete DRM files. Tools like CCleaner (when set too aggressively) wipe out the certificate cache. If you use one, exclude the folder %USERPROFILE%\AppData\Local\Microsoft\Media Player from its scan.
• Keep Windows fully updated. Microsoft has patched several DRM-related bugs over the years. The most recent one that broke certificates was in Windows 10 version 21H2. If you're on an older build, update.
• Don't transfer DRM licenses manually. Copying those .lic files between PCs is a sure way to corrupt them. Let Windows handle it.
• If you reinstall Windows frequently, know that DRM certificates are machine-specific. Your purchased content stays linked to the old machine until you de-authorize it. Log into your Microsoft account and remove old devices from the “Devices” page before wiping the drive.

One last thing: if you're still stuck after all this, check if your system date and time are correct. DRM certificates have expiration dates, and if your clock is off by even a day, Windows rejects them. Go to Settings > Time & Language > Date & time and turn on “Set time automatically”.

That's it. You should be watching your content again. If not—and this is rare—you might be dealing with a hardware failure that corrupted the TPM (Trusted Platform Module) storing the certificate key. That's an advanced issue requiring a motherboard replacement, but I've only seen that twice in ten years of help desk work.