| Previous | Next |
| CO_E_FAILEDTOOPENTHREADTOKEN | CO_E_TRUSTEEDOESNTMATCHCLIENT |
CO_E_FAILEDTOGETTOKENINFO
COM could not read required access-token information
CO_E_FAILEDTOGETTOKENINFO is HRESULT 2147549478 (0x80010126) from winerror.h. The documented description is “Unable to obtain user info from an access token.” The relevant context is the COM IAccessControl, DCOM client identity, trustee translation, token inspection, security descriptor, ACL, or serialization workflow.
Where it is encountered
- IAccessControl initialization, access checks, owner/trustee processing, and serialized ACL persistence.
- Server-side DCOM impersonation, client blanket inspection, token and SID lookup.
- Security descriptor construction, DACL canonicalization, file-backed policy storage, or legacy NetAccess migration.
The immediate focus is token inspection for user SID, groups, privileges, type, statistics, or impersonation level after a token handle was obtained.
What to verify
Verify that the information class, buffer sizing sequence, token access mask, and token lifetime are correct. This distinction prevents it from being misclassified as corruption, network failure, or a reason for an unsafe automatic retry.
Correct handling and recovery
Use the two-call buffer-size pattern, request TOKEN_QUERY, and keep the token valid until extraction completes. Reject incomplete identity data.
Difference from nearby HRESULTs
It occurs after token acquisition; open-token HRESULTs identify failure to obtain the handle itself.
Practical scenario
An access-control component allocates a fixed buffer for TokenGroups. It switches to the required-size pattern and validates every returned SID.
References
Looking for a different code? Search another status or error code.