1. Boot into Windows Recovery Environment (WinRE)
- Power on and interrupt boot 3 times to enter WinRE.
- Go to Troubleshoot → Advanced options → Command Prompt.
2. Run SFC and DISM to Repair System Integrity
- In the Command Prompt, type:
sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows
DISM /Image:C:\ /Cleanup-Image /RestoreHealth
- This repairs corrupted kernel modules, security descriptors, and protected system files.
3. Check and Repair Disk Errors
Corrupted disks can damage security-related data.
- In Command Prompt, run:
chkdsk C: /f /r /x
- Restart after scan completion to fix file system inconsistencies.
4. Verify and Reset Permissions
- Boot into Safe Mode.
- Right-click on C: drive → Properties → Security → Advanced.
- Ensure correct owner and permission inheritance.
- Use icacls C:\ /T /C /Q /RESET in Command Prompt to reset file permissions system-wide.
5. Update or Roll Back Media and Display Drivers
- Open Device Manager → Display adapters / Sound, video, and game controllers.
- Update to the latest WHQL-certified drivers.
- If the problem started after an update, roll back to the previous stable version.
6. Disable or Reconfigure Third-Party Security Tools
- Boot into Safe Mode and temporarily disable antivirus, encryption, or DRM-related tools.
- If disabling resolves the BSOD, uninstall or replace the conflicting application.
7. Check BIOS/UEFI and TPM Settings
- Enter BIOS/UEFI (Del, F2, Esc).
- Restore Default Settings.
- Ensure Secure Boot and TPM are correctly configured.
- Update the BIOS to the latest version available.
- Save and reboot.
8. Perform System Restore
- In WinRE → System Restore.
- Choose a restore point before the BSOD began.
- This helps revert changes to DRM or security configurations.
9. Test System Memory
- Run Windows Memory Diagnostic or MemTest86 to verify RAM stability.
- Faulty memory can corrupt security or encryption data structures.
10. Perform a Clean Installation of Windows
- If all other methods fail, back up your data and perform a Clean Install of Windows.
- This ensures all DRM and kernel-level components are rebuilt cleanly.
The 0x00000086 (INVALID_CAPTION_PROTECTION_PARAMETER) BSOD typically indicates errors in DRM handling, kernel-level permissions, or security descriptor corruption.
To fix the issue:
- Repair system files with SFC and DISM.
- Reset file permissions and verify BIOS/TPM configurations.
- Update or roll back display, DRM, and media drivers.
- Disable conflicting third-party software.
If the problem persists:
- Test RAM for corruption.
- Update BIOS firmware.
- Perform a clean Windows installation for complete restoration.
Addressing invalid protection parameter errors promptly ensures system stability, secure media handling, and uninterrupted Windows performance.