| Previous | Next |
| STATUS_NO_TOKEN | STATUS_RANGE_NOT_LOCKED |
STATUS_BAD_INHERITANCE_ACL
Security inheritance produced an invalid ACL
This status appears while constructing inherited security for a child object. The parent descriptor, inheritance flags, generic mapping, or object-specific ACEs could not be combined into a valid child ACL.
It is not solved by blindly removing security. The useful evidence is the parent descriptor, target object type, and inheritance transformation that failed.
What to inspect
- Inspect inherited ACE flags, object-specific ACE GUIDs, and generic-right mapping.
- Compare the parent descriptor with the child object type being created.
- Check whether a file-system, registry, or directory-service provider applies additional inheritance rules.
References
- Microsoft: Security descriptors
- Microsoft: Windows security model for driver developers
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.