What does Windows error code 1297 (ERROR_INCOMPATIBLE_SERVICE_PRIVILEGE) mean?

 
Previous Next
ERROR_CONTENT_BLOCKED ERROR_APP_HANG

ERROR_INCOMPATIBLE_SERVICE_PRIVILEGE

The service account cannot supply a configured required privilege

SERVICE_REQUIRED_PRIVILEGES_INFO lets a service declare the privileges it requires. SCM can then create the service process token with the required privilege set, but the underlying service account must actually be granted those privileges. If a declared required privilege is absent from the account configuration, service startup can fail with this code.

Query SERVICE_CONFIG_REQUIRED_PRIVILEGES_INFO and compare every privilege name with the rights granted to the configured service account. This is different from ordinary filesystem access denial and from logon-right failures. In a shared-process host, the security context is shared and the effective privilege configuration must be considered across cohosted services. Do not add powerful privileges broadly to LocalService, NetworkService, or a domain account just to clear the error; either grant the minimal right to the intended account or remove an incorrectly declared requirement from the service configuration.

What to inspect

  • Query the service required-privileges multistring and the configured logon account.
  • Compare required privilege names with local or domain user-right assignments.
  • Grant only the missing justified privilege or correct the service declaration.

References


Looking for a different code? Search another status or error code.