DOCUMENT:Q257504 08-AUG-2001 [winnt] TITLE :Errors Applying Permissions with Security Configuration Editor PRODUCT :Microsoft Windows NT PROD/VER::4.0; winnt:4.0 OPER/SYS: KEYWORDS:kbWinNT400PreSP7Fix ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Windows NT Server version 4.0, Terminal Server Edition - Microsoft Windows NT Server, Enterprise Edition version 4.0 - Microsoft Windows NT Workstation version 4.0 ------------------------------------------------------------------------------- SYMPTOMS ======== When you apply permissions on the drive containing the system files, you may receive the following error message: Unable to save permission changes on C: Not enough storage is available to process this command. -or- Unable to save permission changes on C: The parameter is incorrect. This problem occurs only after installing Security Configuration Editor and using the new Access Control List (ACL) editor included with it. CAUSE ===== The error message is generated when a record cannot be recorded in the Application event log. STATUS ====== Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. MORE INFORMATION ================ File permissions should be saved correctly. The event would look similar to: Event Type: Information Event Source: AclPropagation Event ID: 4096 Description: ACL Propagation encountered errors on the following file system directories: C:\WINNT.4\system32\CertSrv\CertControl The DACL was protected. C:\WINNT.4\system32\CertSrv\CertControl\alpha The DACL was protected. C:\WINNT.4\system32\CertSrv\CertControl\x86 The DACL was protected. C:\WINNT.4\system32\CertSrv\CertEnroll The DACL was protected. C:\WINNT.4\system32\config The DACL was protected. C:\WINNT.4\system32\dhcp The DACL was protected. C:\WINNT.4\system32\drivers The DACL was protected. C:\WINNT.4\system32\drivers\etc The DACL was protected. C:\WINNT.4\system32\LLS The DACL was protected. C:\WINNT.4\system32\viewers The DACL was protected. C:\WINNT.4\system32\wins The DACL was protected. The folders that are listed in the Event log also include the Program Files folder. NOTE: This error message does not appear in the Event log. Errors occurred when trying to write it to the Event log. This is what it would look like if it were successful. The error message is not written to the log because the error message's size exceeds the maximum size for Event log records. An event log record has a maximum size of 32 KB of ASCII text, or (in this case), 16 KB of unicode text. Additional query words: secedit sec edit manager perms invalid to memory location ====================================================================== Keywords : kbWinNT400PreSP7Fix Technology : kbWinNTsearch kbWinNTWsearch kbWinNTW400 kbWinNTW400search kbWinNT400search kbWinNTSsearch kbWinNTSEntSearch kbWinNTSEnt400 kbWinNTS400search kbNTTermServ400 kbNTTermServSearch Version : :4.0; winnt:4.0 Issue type : kbprb ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2001.