| Previous | Next |
| ERROR_CONTENT_BLOCKED | ERROR_APP_HANG |
ERROR_INCOMPATIBLE_SERVICE_PRIVILEGE
The service account cannot supply a configured required privilege
SERVICE_REQUIRED_PRIVILEGES_INFO lets a service declare the privileges it requires. SCM can then create the service process token with the required privilege set, but the underlying service account must actually be granted those privileges. If a declared required privilege is absent from the account configuration, service startup can fail with this code.
Query SERVICE_CONFIG_REQUIRED_PRIVILEGES_INFO and compare every privilege name with the rights granted to the configured service account. This is different from ordinary filesystem access denial and from logon-right failures. In a shared-process host, the security context is shared and the effective privilege configuration must be considered across cohosted services. Do not add powerful privileges broadly to LocalService, NetworkService, or a domain account just to clear the error; either grant the minimal right to the intended account or remove an incorrectly declared requirement from the service configuration.
What to inspect
- Query the service required-privileges multistring and the configured logon account.
- Compare required privilege names with local or domain user-right assignments.
- Grant only the missing justified privilege or correct the service declaration.
References
- Microsoft: SERVICE_REQUIRED_PRIVILEGES_INFO
- Microsoft: ChangeServiceConfig2W
- Microsoft: Service Security and Access Rights
Looking for a different code? Search another status or error code.
