| Previous | Next |
| CO_E_NOMATCHINGSIDFOUND | CO_E_NOMATCHINGNAMEFOUND |
CO_E_LOOKUPACCSIDFAILED
LookupAccountSid failed during COM access processing
CO_E_LOOKUPACCSIDFAILED is HRESULT 2147549488 (0x80010130) from winerror.h. The documented description is “The system function, LookupAccountSID, failed.” The relevant context is the COM IAccessControl, DCOM client identity, trustee translation, token inspection, security descriptor, ACL, or serialization workflow.
Where it is encountered
- IAccessControl initialization, access checks, owner/trustee processing, and serialized ACL persistence.
- Server-side DCOM impersonation, client blanket inspection, token and SID lookup.
- Security descriptor construction, DACL canonicalization, file-backed policy storage, or legacy NetAccess migration.
The immediate focus is translation from a SID to account and domain names where the Win32 lookup call fails.
What to verify
Verify that the SID is valid and the target lookup system, buffer-sizing sequence, domain trust, and native error are recorded. Validate this condition using the owning API state, not an inferred UI symptom.
Difference from nearby HRESULTs
It wraps API failure; CO_E_NOMATCHINGNAMEFOUND emphasizes that no account name could be found for the SID.
Correct handling and recovery
Use the required-size pattern, allow unresolved SIDs to remain as canonical SID strings, and retry directory lookup only after connectivity or trust changes.
Reconcile partial output and server-side effects before attempting the operation again.
Practical scenario
An offline laptop cannot contact a trusted domain for an old SID. The ACL editor displays the SID string and resolves the name after connectivity returns.
References
Looking for a different code? Search another status or error code.