| Previous | Next |
| CO_E_LOOKUPACCSIDFAILED | CO_E_LOOKUPACCNAMEFAILED |
CO_E_NOMATCHINGNAMEFOUND
No trustee name corresponds to the supplied SID
CO_E_NOMATCHINGNAMEFOUND is HRESULT 2147549489 (0x80010131) from winerror.h. The documented description is “Unable to find a trustee name that corresponds to a security identifier provided by the user.” The relevant context is the COM IAccessControl, DCOM client identity, trustee translation, token inspection, security descriptor, ACL, or serialization workflow.
Where it is encountered
- IAccessControl initialization, access checks, owner/trustee processing, and serialized ACL persistence.
- Server-side DCOM impersonation, client blanket inspection, token and SID lookup.
- Security descriptor construction, DACL canonicalization, file-backed policy storage, or legacy NetAccess migration.
The immediate focus is a structurally valid SID that cannot be mapped to a current account name in local or trusted account databases.
What to verify
Verify that the SID origin and account deletion, domain removal, trust, and connectivity conditions are distinguished. Validate this condition using the owning API state, not an inferred UI symptom.
Correct handling and recovery
Preserve the SID in ACLs and logs, display a SID-form fallback, and let administrators replace orphaned principals deliberately.
Reconcile partial output and server-side effects before attempting the operation again.
Practical scenario
An ACL contains a SID from a decommissioned domain. The management UI shows the raw SID and supports explicit replacement without deleting the ACE silently.
Difference from nearby HRESULTs
It describes absent SID-to-name mapping; CO_E_INVALIDSID says the SID itself is malformed.
Developer and administrator guidance
After it, avoid broad permission grants or system-wide resets unless code-specific evidence proves a global configuration problem.
References
Looking for a different code? Search another status or error code.