| Previous | Next |
| STATUS_INVALID_SUB_AUTHORITY | STATUS_INVALID_SID |
STATUS_INVALID_ACL
The ACL structure cannot be parsed as a valid access-control list
An ACL is a sequence of access-control entries inside a security descriptor. This status indicates that the ACL structure itself is invalid, not merely that it grants or denies the wrong access.
The problem can be malformed size fields, bad ACE boundaries, unsupported ACE types for the object, or corrupted serialized security data.
What to inspect
- Validate ACL size, revision, ACE count, and each ACE boundary.
- Check whether inheritance or conversion code constructed an ACE that is not valid for the target OS or object type.
- Separate invalid ACL structure from an access-denied result caused by a valid DACL.
References
- Microsoft: Security descriptors
- Microsoft: Windows security model for driver developers
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.