Error SDDL installing Service Control

Hi,

Trying to install service control on my machine gives this error (I tried to install even with local admin privileges…no luck…). It happens on all transports…

System.ArgumentException: The SDDL form of a security descriptor object is invalid.
Parameter name: sddlForm
at System.Security.AccessControl.RawSecurityDescriptor.BinaryFormFromSddlForm(String sddlForm)
at ServiceControlInstaller.Engine.UrlAcl.UrlReservation.SecurityIdentifiersFromSecurityDescriptor(String securityDescriptor)
at ServiceControlInstaller.Engine.UrlAcl.UrlReservation.GetAll()
at ServiceControlInstaller.Engine.Instances.ServiceControlNewInstance.CheckForConflictingUrlAclReservations()
at ServiceControlInstaller.Engine.Instances.ServiceControlNewInstance.Validate(Func2 promptToProceed) at ServiceControl.Config.Framework.Modules.ServiceControlInstanceInstaller.Add(ServiceControlNewInstance details, IProgress1 progress, Func2 promptToProceed) at System.Threading.Tasks.Task1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at ServiceControl.Config.UI.InstanceAdd.ServiceControlAddAttachment.d__3.MoveNext()

Thanks

Hi Abel!

What version of the OS are you running?

What version of ServiceControl are you trying to install?

What happens if you do netsh http show urlacl from a console on the machine?

Does it work on other machines?

Cheers,

Andreas

Hi. I am using Windows 10 version 1903. I wasn’t working either on version 1809.
And as far for the reservations on the urls I already looked at them (the default ports 33333 for conflicts…No luck…). And yes on other machines no problems.

Thanks

URL Reservations:

Reserved URL            : http://*:5357/
    User: BUILTIN\Usuarios
        Listen: Yes
        Delegate: No
    User: NT AUTHORITY\LOCAL SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;BU)(A;;GX;;;LS)

Reserved URL            : http://+:80/Temporary_Listen_Addresses/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Reserved URL            : https://*:5358/
    User: BUILTIN\Usuarios
        Listen: Yes
        Delegate: No
    User: NT AUTHORITY\LOCAL SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;BU)(A;;GX;;;LS)

Reserved URL            : https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/
    User: NT SERVICE\SstpSvc
        Listen: Yes
        Delegate: Yes
    User: BUILTIN\Administradores
        Listen: Yes
        Delegate: Yes
    User: NT AUTHORITY\SYSTEM
        Listen: Yes
        Delegate: Yes
        SDDL: D:(A;;GA;;;S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314)(A;;GA;;;BA)(A;;GA;;;SY)

Reserved URL            : http://+:10247/apps/
    User: NT AUTHORITY\Authenticated Users
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;AU)

Reserved URL            : http://*:2869/
    User: NT AUTHORITY\LOCAL SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;LS)

Reserved URL            : https://+:5986/wsman/
    User: NT SERVICE\WinRM
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)

Reserved URL            : http://+:47001/wsman/
    User: NT SERVICE\WinRM
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)

Reserved URL            : http://+:5985/wsman/
    User: NT SERVICE\WinRM
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)

Reserved URL            : http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/
    User: NT AUTHORITY\NETWORK SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;NS)

Reserved URL            : https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/
    User: NT AUTHORITY\NETWORK SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;NS)

Reserved URL            : http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/
    User: NT AUTHORITY\NETWORK SERVICE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;NS)

Reserved URL            : https://+:10245/WMPNSSv4/
    User: NT SERVICE\WMPNetworkSvc
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-2375682873-768044350-3534595160-1005545032-2873800392)

Reserved URL            : http://+:10243/WMPNSSv4/
    User: NT SERVICE\WMPNetworkSvc
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-2375682873-768044350-3534595160-1005545032-2873800392)

Reserved URL            : http://+:10246/MDEServer/
    User: NT AUTHORITY\Authenticated Users
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;AU)

Reserved URL            : http://+:8733/Design_Time_Addresses/
    User: NT AUTHORITY\INTERACTIVE
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;IU)

Reserved URL            : http://+:12292/

Can’t lookup sid, Error: 1332
SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1001)

Reserved URL            : http://127.0.0.1:47873/help/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Reserved URL            : https://localhost:60395/NewpolSite/
    User: EUES02EXAVILALT\abel
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1004)

Reserved URL            : https://172.17.208.129:10251/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://[::1]:10251/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://172.17.208.129:10252/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://[::1]:10252/
    User: EUES02EXAVILALT\DocDBMasterService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1034)

Reserved URL            : https://172.17.208.129:10253/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : https://[::1]:10253/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : https://172.17.208.129:10254/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : https://[::1]:10254/
    User: EUES02EXAVILALT\DocDBServerService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1035)

Reserved URL            : http://localhost:60394/CdaSite/
    User: EUES02EXAVILALT\abel
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1004)

Reserved URL            : http://+:15099/
    User: EUES02EXAVILALT\abel
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-21-4010127240-3969876254-3723982080-1004)

Reserved URL            : https://+:6516/

Can’t get security descriptor, Error: 87
Reserved URL : https://+:3392/rdp/
User: NT SERVICE\TermService
Listen: Yes
Delegate: No
SDDL: D:(A;;GX;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)

Reserved URL            : http://+:3387/rdp/
    User: NT SERVICE\TermService
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)

Reserved URL            : http://+:9007/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Reserved URL            : http://+:9090/
    User: \Everyone
        Listen: Yes
        Delegate: No
        SDDL: D:(A;;GX;;;WD)

Thanks

Looks like your urlacl reservations have been corrupted somehow. Would you be able to delete the failing ones using https://docs.microsoft.com/en-us/windows/desktop/http/delete-urlacl ?

Hi,

Thanks so much! I deleted the two ones that were corrupted and finally I got it working! (I’ve been dealing moths with this…:frowning: )

Awesome, glad you got it sorted!