Error SDDL installing Service Control

zodraz · June 18, 2019, 7:01am

Hi,

Trying to install service control on my machine gives this error (I tried to install even with local admin privileges…no luck…). It happens on all transports…

System.ArgumentException: The SDDL form of a security descriptor object is invalid.
Parameter name: sddlForm
at System.Security.AccessControl.RawSecurityDescriptor.BinaryFormFromSddlForm(String sddlForm)
at ServiceControlInstaller.Engine.UrlAcl.UrlReservation.SecurityIdentifiersFromSecurityDescriptor(String securityDescriptor)
at ServiceControlInstaller.Engine.UrlAcl.UrlReservation.GetAll()
at ServiceControlInstaller.Engine.Instances.ServiceControlNewInstance.CheckForConflictingUrlAclReservations()
at ServiceControlInstaller.Engine.Instances.ServiceControlNewInstance.Validate(Func2 promptToProceed) at ServiceControl.Config.Framework.Modules.ServiceControlInstanceInstaller.Add(ServiceControlNewInstance details, IProgress1 progress, Func2 promptToProceed) at System.Threading.Tasks.Task1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at ServiceControl.Config.UI.InstanceAdd.ServiceControlAddAttachment.d__3.MoveNext()

Thanks

andreasohlund · June 19, 2019, 8:06am

Hi Abel!

What version of the OS are you running?

What version of ServiceControl are you trying to install?

What happens if you do netsh http show urlacl from a console on the machine?

Does it work on other machines?

Cheers,

Andreas

zodraz · June 19, 2019, 9:53am

Hi. I am using Windows 10 version 1903. I wasn’t working either on version 1809.
And as far for the reservations on the urls I already looked at them (the default ports 33333 for conflicts…No luck…). And yes on other machines no problems.

Thanks

URL Reservations:

Reserved URL            : http://*:5357/
    User: BUILTIN\Usuarios
        Listen: Yes
        Delegate: No
    User: NT AUTHORITY\LOCAL SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;BU)(A;;GX;;;LS)

Reserved URL            : http://+:80/Temporary_Listen_Addresses/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Reserved URL            : https://*:5358/
    User: BUILTIN\Usuarios
        Listen: Yes
        Delegate: No
    User: NT AUTHORITY\LOCAL SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;BU)(A;;GX;;;LS)

Reserved URL            : https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/
    User: NT SERVICE\SstpSvc
        Listen: Yes
        Delegate: Yes
    User: BUILTIN\Administradores
        Listen: Yes
        Delegate: Yes
    User: NT AUTHORITY\SYSTEM
        Listen: Yes
        Delegate: Yes
        SDDL: D:(A;;GA;;;S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314)(A;;GA;;;BA)(A;;GA;;;SY)

Reserved URL            : http://+:10247/apps/
    User: NT AUTHORITY\Authenticated Users
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;AU)

Reserved URL            : http://*:2869/
    User: NT AUTHORITY\LOCAL SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;LS)

Reserved URL            : https://+:5986/wsman/
    User: NT SERVICE\WinRM
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)

Reserved URL            : http://+:47001/wsman/
    User: NT SERVICE\WinRM
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)

Reserved URL            : http://+:5985/wsman/
    User: NT SERVICE\WinRM
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)

Reserved URL            : http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/
    User: NT AUTHORITY\NETWORK SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;NS)

Reserved URL            : https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/
    User: NT AUTHORITY\NETWORK SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;NS)

Reserved URL            : http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/
    User: NT AUTHORITY\NETWORK SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;NS)

Reserved URL            : https://+:10245/WMPNSSv4/
    User: NT SERVICE\WMPNetworkSvc
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-2375682873-768044350-3534595160-1005545032-2873800392)

Reserved URL            : http://+:10243/WMPNSSv4/
    User: NT SERVICE\WMPNetworkSvc
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-2375682873-768044350-3534595160-1005545032-2873800392)

Reserved URL            : http://+:10246/MDEServer/
    User: NT AUTHORITY\Authenticated Users
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;AU)

Reserved URL            : http://+:8733/Design_Time_Addresses/
    User: NT AUTHORITY\INTERACTIVE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;IU)

Reserved URL            : http://+:12292/

Can’t lookup sid, Error: 1332
SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1001)

Reserved URL            : http://127.0.0.1:47873/help/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Reserved URL            : https://localhost:60395/NewpolSite/
    User: EUES02EXAVILALT\abel
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1004)

Reserved URL            : https://172.17.208.129:10251/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://[::1]:10251/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://172.17.208.129:10252/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://[::1]:10252/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://172.17.208.129:10253/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : https://[::1]:10253/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : https://172.17.208.129:10254/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : https://[::1]:10254/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : http://localhost:60394/CdaSite/
    User: EUES02EXAVILALT\abel
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1004)

Reserved URL            : http://+:15099/
    User: EUES02EXAVILALT\abel
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1004)

Reserved URL            : https://+:6516/

Can’t get security descriptor, Error: 87
Reserved URL : https://+:3392/rdp/
User: NT SERVICE\TermService
Listen: Yes
Delegate: No
SDDL: D:(A;;GX;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)

Reserved URL            : http://+:3387/rdp/
    User: NT SERVICE\TermService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)

Reserved URL            : http://+:9007/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Reserved URL            : http://+:9090/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Thanks

andreasohlund · June 19, 2019, 10:14am

Looks like your urlacl reservations have been corrupted somehow. Would you be able to delete the failing ones using delete urlacl - Win32 apps | Microsoft Learn ?

zodraz · June 19, 2019, 11:37am

Hi,

Thanks so much! I deleted the two ones that were corrupted and finally I got it working! (I’ve been dealing moths with this… )

andreasohlund · June 19, 2019, 11:42am

Awesome, glad you got it sorted!