| Previous | Next |
| CO_E_ACCESSCHECKFAILED | CO_E_WRONGTRUSTEENAMESYNTAX |
CO_E_NETACCESSAPIFAILED
Legacy NetAccess API failed while updating COM access data
CO_E_NETACCESSAPIFAILED is HRESULT 2147549483 (0x8001012B) from winerror.h. The documented description is “Either NetAccessDel or NetAccessAdd returned an error code.” The relevant context is the COM IAccessControl, DCOM client identity, trustee translation, token inspection, security descriptor, ACL, or serialization workflow.
What to verify
Verify that the target system, resource, principal, operation, and original network API status are retained instead of only the wrapping HRESULT.
Where it is encountered
- IAccessControl initialization, access checks, owner/trustee processing, and serialized ACL persistence.
- Server-side DCOM impersonation, client blanket inspection, token and SID lookup.
- Security descriptor construction, DACL canonicalization, file-backed policy storage, or legacy NetAccess migration.
The immediate focus is legacy access-control persistence that depends on NetAccessAdd or NetAccessDel.
Correct handling and recovery
Correct the legacy network access entry or migrate to supported security-descriptor APIs. Do not report success when only part of an add/delete pair completed.
An unchanged retry loop can duplicate effects, deepen reentrancy, or hide an invalid lifetime transition.
Difference from nearby HRESULTs
It is persistence through legacy NetAccess APIs; DACL HRESULTs describe modern descriptor construction or ordering.
Developer and administrator guidance
After it, avoid broad permission grants or system-wide resets unless code-specific evidence proves a global configuration problem.
Practical scenario
An upgrade removes an old access entry before adding its replacement, but the add fails. The migration restores the prior entry and logs the native network status.
References
Looking for a different code? Search another status or error code.