Windows error 1290 (ERROR_INCOMPATIBLE_SERVICE_SID

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: services sharing one process have incompatible restricted service SID settings.

Previous	Next
ERROR_BEYOND_VDL	ERROR_DRIVER_PROCESS_TERMINATED

ERROR_INCOMPATIBLE_SERVICE_SID_TYPE

Shared-process services have incompatible service SID types

SERVICE_SID_TYPE_RESTRICTED adds the service SID to the process token and to the restricted SID list. Microsoft explicitly requires that if multiple services share one process and one service uses the restricted SID type, all services in that process must use SERVICE_SID_TYPE_RESTRICTED.

Identify every service hosted in the affected process and query SERVICE_CONFIG_SERVICE_SID_INFO for each one. This error is about the shared security context, not the service account password. If a SID type was just changed, Microsoft notes that the change takes effect on the next system start; the error text also warns that the hosting process may need to be restarted. Do not simply downgrade one service to NONE without reviewing ACLs that depend on its service SID and the intended isolation model.

What to inspect

Enumerate services sharing the host process and query each SID type.
Restart the hosting context after configuration changes when required.
Review service-specific ACLs before changing restricted or unrestricted SID policy.

References

Looking for a different code? Search another status or error code.