WindowsError: [Error 1338] The security descr

July 1, 2011 at 23:43:56
Specs: Windows 2003
WindowsError: [Error 1338] The security descriptor structure is invalid. This error message comes up when I open services.msc. I am able to open Compmgmt.msc, Eventvwr.msc. Problem occurs only while opening services.msc. I have tried all the ways to open services.msc but nothing works. Reinstalled the SP2, rebooted the server (Windows Server 2003 Enterprise SP2). Nothing resolves the issue. Also copied the Filemgmt.dll from a working server to the affected server and registered it in the registry, still the issue is persisting. Please suggest.

See More: WindowsError: [Error 1338] The security descr

Report •

#1
July 18, 2011 at 03:55:48
You could run the following on the problem server:
for /f %i in ('wmic service get name') do @echo %i >> bad.txt & sc sdshow %i >> bad.txt
Run the same command on a working server (different output file) running the same OS version, service pack, updates, and applications (may not be identical but the closer the configurations the better):
for /f %i in ('wmic service get name') do @echo %i >> good.txt & sc sdshow %i >> good.txt
Then use your text compare tool of choice (Winmerge, WinDiff, Beyond Compare, etc.) to compare bad.txt to good.txt to find out which service has incorrect permissions.
Then you can use "sc sdset <service name> <SDDL string>" to change the security descriptor on the services you identify to be different than on the good server.
But keep in mind they could be different for a reason - something needs specific permissions set on a service to work properly. That is why the closer the configurations of the bad versus good servers, the less chance you are changing something that will
break something else.

ServerAdministrators


Report •
Related Solutions


Ask Question