How to Fix Windows Error 0xC00002C8
By Sai Kiran Pandrala · reviewed by Sai Kiran Pandrala, Editor Last verified: 2026-05-25
| Error code | 0xC00002C8 |
|---|---|
| Symbolic name | STATUS_COMMITMENT_MINIMUM |
| Platform | Windows |
| Error class | NTSTATUS |
| Official message | {Virtual Memory Minimum Too Low} Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications might be denied. For more information, see Help. |
| Source | Microsoft MS-ERREF (NTSTATUS) |
What is 0xC00002C8?
0xC00002C8 is a Windows NTSTATUS value returned by the kernel or by a driver running in kernel mode. NTSTATUS codes are 32-bit values that the user-mode layer normally converts to a Win32 error before showing it, but tools that call into the native API directly (debuggers, kernel tracers, file-system filter drivers) surface the raw status. In plain English, this code says: commitment minimum. The official reference describes it like this: "{Virtual Memory Minimum Too Low} Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications might be denied. For more information, see Help.". That description is the contract; the actual fix depends on which subsystem produced the value, which is what the rest of this guide walks through.
When does 0xC00002C8 appear?
The same status code can come from very different code paths. Here are the scenarios I see most often when STATUS_COMMITMENT_MINIMUM shows up on a real machine:
- The paging file is fixed at a small size and a large process pushes the system into commit-charge starvation.
- Many short-lived processes spawn quickly (build server, antivirus on-access scan) and exhaust the kernel pool.
- A leaky long-running service grows past the working-set limit and Windows starts denying allocations to other processes.
- Disk space on the volume that holds pagefile.sys runs out and the swap file cannot grow further.
If your environment matches more than one of these, work the fix steps in order: cheap diagnostics first, system repair second, in-place reinstall as the last resort.
How to fix 0xC00002C8
Run an elevated PowerShell prompt (right-click Start, then Windows Terminal (Admin) or PowerShell (Admin)). Each block below is a copy-paste recipe; adapt the placeholders in angle brackets to your environment before running.
Look at current commit charge and pagefile size (PowerShell, run as administrator)
Get-Counter '\Memory\Committed Bytes','\Memory\Commit Limit','\Paging File(*)\% Usage'
wmic pagefile list /format:list
Resize the pagefile to system-managed and reboot (PowerShell, run as administrator)
wmic computersystem set AutomaticManagedPagefile=True
shutdown /r /t 60
Find the leakiest process before it pushes the system over again (PowerShell, run as administrator)
Get-Process | Sort-Object -Property WorkingSet -Descending | Select-Object -First 10 Name, Id, @{n='WS(MB)';e={[int]($_.WorkingSet/1MB)}}, @{n='PrivateMB';e={[int]($_.PrivateMemorySize/1MB)}}
CMD fallback (run as administrator)
wmic pagefile list /format:list
wmic computersystem set AutomaticManagedPagefile=True
Pull the matching event-log entry
$code = '0xC00002C8'
Get-WinEvent -LogName System -MaxEvents 1000 | Where-Object { $_.Message -match $code } | Select-Object -First 10 TimeCreated, Id, ProviderName, Message | Format-List
Get-WinEvent -LogName Application -MaxEvents 1000 | Where-Object { $_.Message -match $code } | Select-Object -First 10 TimeCreated, Id, ProviderName, Message | Format-List
Back the registry up before any edit
$stamp = Get-Date -Format yyyyMMdd-HHmm
New-Item -ItemType Directory -Force -Path 'C:\Backup' | Out-Null
reg export 'HKLM\SOFTWARE' "C:\Backup\HKLM-Software-pre-windows-error-0xc00002c8-$stamp.reg" /y
reg export 'HKLM\SYSTEM' "C:\Backup\HKLM-System-pre-windows-error-0xc00002c8-$stamp.reg" /y
If you can't fix immediately
Reduce the blast radius until the change window opens: stop the service that raises the error, isolate the host from production traffic, or fall back to a known-good snapshot. A short workaround beats a rushed change on a Friday night.
# Pause the affected service and capture state before changing anything.
Get-Service | Where-Object Status -eq 'Running' | Where-Object Name -match '<service-keyword>' | Stop-Service -Force -PassThru
Get-ScheduledTask | Where-Object State -ne 'Disabled' | Where-Object TaskName -match '<task-keyword>' | Disable-ScheduledTask
How to verify the fix worked
Work through these checks in order. If any one fails, repeat the matching fix step before moving on.
- Get-Counter '\Memory\Available MBytes' should report a comfortable headroom (target: at least 15% of installed RAM).
- wmic pagefile list /format:list should confirm AutomaticManagedPagefile=TRUE.
- Re-run the workload that triggered the low-memory event and confirm no new ResourceExhaustion entries appear in the System log.
Frequently asked questions
What does 0xC00002C8 mean exactly?
The Windows documentation defines it as a ntstatus that signals commitment minimum. In day-to-day terms, it is the operating system telling a calling program that the request cannot complete in the current state. The fix is almost always about restoring the state the caller expected, not about removing the code itself.
Is 0xC00002C8 dangerous?
By itself this surfaces as a warning, not a critical failure. The status code is a symptom, not the disease. The danger is in what produced it: a corrupted driver, a flaky disk, an exhausted resource, or a permission boundary that is wrong. Read the event-log context around the code before assuming the worst.
Will reinstalling Windows fix it?
Usually no, and it is the wrong first move. A clean install removes the entire configuration that produced the error, which makes it look fixed for a few days while you reinstall apps and drivers. The same condition tends to come back the moment the original workload is restored. Work the fix steps above before you reach for the install media.
What is the difference between 0xC00002C8 and the symbolic name STATUS_COMMITMENT_MINIMUM?
They are the same value. 0xC00002C8 is the numeric form a developer prints, and STATUS_COMMITMENT_MINIMUM is the C/C++ constant defined in the Windows headers. Tooling that consumes one will accept the other; the lookup is deterministic.
Where can I look up other NTSTATUS codes?
Microsoft maintains the full reference at MS-ERREF. For Win32 error names there is the System Error Codes index. Both are searchable by hex value and by the symbolic name.
Related error codes
Related fixes
Related guides worth a look while you sort this one out:
- How to Fix Windows Error 0xC00002C2
- How to Fix Windows Error 0xC00002C3
- How to Fix Windows Error 0xC00002C4
- How to Fix Windows Error 0xC00002C5
- How to Fix Windows Error 0xC00002C6
- How to Fix Windows Error 0xC00002C7
References
- Microsoft Learn - NTSTATUS reference: https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/596a1078-e883-4972-9bbc-49e60bebca55
- Microsoft MS-ERREF (full Windows error code reference): https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/
- Microsoft Learn - System Error Codes index: https://learn.microsoft.com/en-us/windows/win32/debug/system-error-codes
- Microsoft Learn - Event Logging on Windows: https://learn.microsoft.com/en-us/windows/win32/eventlog/event-logging
Field notes from real Windows incidents
When I work on the 0xC00002C8 symptom the rhythm I lean on is the one I have built over years of these tickets. Windows error codes come in a handful of families; once you recognise the family, the doc page is one search away. DISM RestoreHealth needs network or a known-good source image; the most common cause of a failed RestoreHealth is a blocked Windows Update endpoint. STOP codes look terrifying but the first DWORD almost always points directly at the responsible driver.
Tools I actually reach for
For the 0xC00002C8 symptom on Windows the cheapest signal I can land usually comes from Reliability Monitor (perfmon /rel), then DISM and sfc, WinDbg for STOP code analysis, PowerShell Get-WinEvent when Reliability Monitor (perfmon /rel) cannot see the layer the fault sits in, and Windows Performance Recorder for the cases where neither of those answers cleanly. That ordering is not academic. It matches the layers the failure tends to surface through, so the cheap signal lands first and the heavier tooling only comes out when the simpler answer does not hold up under scrutiny.
Verification I run before I close the ticket
Before I mark the 0xC00002C8 symptom resolved on a Windows unit, the verification loop below is what I actually run. Each step proves a different layer is green, and the order matters - the cheap checks gate the more expensive ones.
err.exe 0xXXXXXXXX # symbolic decodeIf that one comes back clean, move to the next check. If it does not, stop and dig in there before layering more verification on top of a red signal.
sfc /scannowIf that one comes back clean, move to the next check. If it does not, stop and dig in there before layering more verification on top of a red signal.
wevtutil epl System system.evtx # export for offline reviewIf that one comes back clean, move to the next check. If it does not, stop and dig in there before layering more verification on top of a red signal.
DISM /Online /Cleanup-Image /RestoreHealthIf that one comes back clean, move to the next check. If it does not, stop and dig in there before layering more verification on top of a red signal.
Get-WinEvent -FilterHashtable @{LogName='System'; Level=1,2; StartTime=(Get-Date).AddDays(-7)}Only when every line above runs clean do I close the ticket and update the runbook with the timestamps.
Where I check first when the docs disagree
When two sources contradict each other on a Windows detail, the disambiguation order I lean on is stable. I usually start at learn.microsoft.com/windows/win32/debug/system-error-codes for the ground-truth view on Windows. I usually start at support.microsoft.com for the ground-truth view on Windows. I usually start at github.com/microsoft/Windows-Driver-Frameworks for the ground-truth view on Windows. Random blog posts and reseller wikis are signal, not ground truth, and I treat them as such until the references above either confirm or contradict the claim.
Pitfalls I have walked into on this exact path
The shortcuts that look smart on the 0xC00002C8 symptom have a habit of biting back. The pitfalls below are the ones I have personally walked into on a Windows unit, not things I read about. Reliability Monitor is the single most underused triage surface in Windows — it gives 30 days of crash history without writing a query. STOP codes look terrifying but the first DWORD almost always points directly at the responsible driver. When in doubt I revert to the slower path that the manual prescribes - the time I save by skipping it is always smaller than the time I spend cleaning up afterwards.
What I tell the next on-call
When I hand the 0xC00002C8 symptom off to the next person on rotation, the three lines I leave in the runbook are these. First, the symptom signature for Windows on the Windows family - not a paraphrase, the exact string that surfaces. Second, the diagnostic that gave the highest signal in the least time. Third, the exact verification command whose green output justified closing the ticket. That trio is what turns a one-off fix into a runbook entry the next engineer can use without paging me at three in the morning.
I also add a one-line note on the cost of getting this wrong. For the 0xC00002C8 symptom on a Windows unit, the cost is rarely the replacement part. It is the downtime, the second site visit, and the trust deficit you spend with whoever owns the asset when the fix does not hold. That framing keeps the next on-call from choosing the cheap-looking shortcut that ends up costing the most in elapsed hours and goodwill.