Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a standard Windows 7 account called popuser to which I'd like to grant start and stop permissions for the OpenVPNService. I've used the following command successfully on other machines, but for some reason on a new Acer Aspire 5830T it doesn't do the trick for me:

subinacl /service OpenVPNService /grant=popuser=TO

I keep getting the following error message:

LookupAccountName : OpenVPNService:popuser 1337 The security ID structure is invalid.

Current object OpenVPNService will not be processed

Elapsed Time: 00 00:00:00
Done: 0, Modified 0, Failed 0, Syntax errors 1
Last Syntax Error:WARNING : /grant=popuser=to : Error when checking arguments - OpenVPNService

I've tried adding the machine name to the username and the service name to no avail. I'm running command prompt as an administrator.

What's going on, and how can I make this work?

share|improve this question
Is it appropriate if someone made a 1337 joke here? – 6pack kid May 23 at 2:04

The problem was that my 'popuser' account had originally been created with another name and then was renamed to popuser. subinacl did not recognize the new name as an account. I deleted and added the account properly and now it works.

share|improve this answer

This happens when the user account in question cannot be identified from the name entered. In this case, the problem was that an account had been renamed. I'm guessing that only the display name was changed, not the technical SAM name; you can get the SAM name by running whoami as the user.

A common cause of this error with built-in accounts and groups (e.g. Administrators) is localization - on non-English systems, you need to specify the translated name of such principals.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.