DISM /Mount-Image >> Error: 1299 Indicates a particular Security ID may not be assigned as the label of an object.

~OSD~ 2,201 Reputation points
2023-09-01T22:06:04.3+00:00

Hi,

Encounter following error while mounting a WIM image.

Deployment Image Servicing and Management tool
Version: 10.0.22621.1
Mounting image
[===========================72.0%=========                 ]
Error: 1299
Indicates a particular Security ID may not be assigned as the label of an object.
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

And here is the extract from the log file.

Image Index: [1]
Mount Guid:  [afe34b40-6830-4cb5-b30b-56faed46e6ca]
Mount Path:  [D:\Mount]
[7372.9260] [0xd0000446] WimSetSecurityDescriptor:(321)
[7372.9260] [0xd0000446] RestoreSecurityDescriptor:(1477)
[7372.9260] [0xc144012e] 
2023-08-30 10:13:35, Error                 DISM   DISM WIM Provider: PID=7372 [RestoreSecurityDescriptor:(1487) -> SetSecurityInfo() failed] D:\Mount\Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache\419c0776bef38484.fb97e96764ea70ae.7170d1f5.6b8ae907.0.parc (HRESULT=0x80070513) - CWimManager::WimProviderMsgLogCallback
[7372.9260] [0xd0000446] RestoreFileMetadata:(526)
[7372.9260] [0xc144012e] 
2023-08-30 10:13:35, Error                 DISM   DISM WIM Provider: PID=7372 [RestoreFileMetadata:(530) -> RestoreSecurityDescriptor failed] D:\Mount\Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache\419c0776bef38484.fb97e96764ea70ae.7170d1f5.6b8ae907.0.parc (HRESULT=0x80070513) - CWimManager::WimProviderMsgLogCallback
[7372.9260] [0xd0000446] RestoreRefNode:(1755)
[7372.9260] [0xc144012e] 
2023-08-30 10:13:35, Error                 DISM   DISM WIM Provider: PID=7372 D:\Mount\Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache\419c0776bef38484.fb97e96764ea70ae.7170d1f5.6b8ae907.0.parc (HRESULT=0x80070513) - CWimManager::WimProviderMsgLogCallback
[7372.9260] [0xd0000446] RestoreRefNodeCallback:(1913)
[7372.9260] [0xd0000446] ProcessWimQueueNode:(98)
[7372.9260] [0xd0000446] DequeueWimData:(304)
[7372.9260] [0xd0000446] ImageWorkerThread:(250)
[7372.9588] [0xd0000446] GetImageErrorCode:(2866)
[7372.8216] [0xd0000446] GetImageErrorCode:(2866)
[7372.8216] [0xd0000446] ImageWorkerThread:(198)
[7372.9588] [0xd0000446] RestoreFileNodeList:(2070)
[7372.9588] [0xd0000446] RestoreFilesCallback:(3708)
[7372.9588] [0xd0000446] EnumImageDataEntries:(1070)
[7372.9588] [0xd0000446] RestoreAllData:(1127)
[7372.9588] [0xd0000446] WIMApplyImageInternal:(788)
[7372.9588] [0x80070513] ImageStubMountDirectory:(985): Indicates a particular Security ID may not be assigned as the label of an object.
[7372.9588] [0x80070513] WIMMountImageHandle:(1287): Indicates a particular Security ID may not be assigned as the label of an object.
[7372.9588] [0x80004005] DeleteAndRestoreDirectory:(335): Unspecified error
[7372.9588] [0xc1420117] DeleteAndRestoreDirectory:(336)
[7372.9588] [0xc1420117] RestoreMountDirectory:(404)
[7372.9588] [0xc1420117] WIMMountImageHandle:(1340)
2023-08-30 10:14:50, Error                 DISM   DISM WIM Provider: PID=7372 TID=9588 "Failed to mount the image." - CWimImageInfo::Mount(hr:0x80070513)
2023-08-30 10:14:50, Error                 DISM   DISM Imaging Provider: PID=7372 TID=9588 onecore\base\ntsetup\opktools\dism\providers\imagingprovider\dll\genericimagingmanager.cpp:833 - CGenericImagingManager::InternalOpMount(hr:0x80070513)
2023-08-30 10:14:50, Error                 DISM   DISM Imaging Provider: PID=7372 TID=9588 onecore\base\ntsetup\opktools\dism\providers\imagingprovider\dll\genericimagingmanager.cpp:746 - CGenericImagingManager::InternalCmdMount(hr:0x80070513)
2023-08-30 10:14:50, Error                 DISM   DISM Imaging Provider: PID=7372 TID=9588 onecore\base\ntsetup\opktools\dism\providers\imagingprovider\dll\genericimagingmanager.cpp:538 - CGenericImagingManager::ExecuteCmdLine(hr:0x80070513)
2023-08-30 10:14:50, Info                  DISM   DISM.EXE: Image session has been closed. Reboot required=no.
2023-08-30 10:14:50, Info                  DISM   DISM.EXE: 
2023-08-30 10:14:50, Info                  DISM   DISM.EXE: 
<----- Ending Dism.exe session ----->

I am mounting Windows 11 image. This image was captured on a Lenovo Laptop and was "generalized" with "Sysprep".

Any thoughts? Suggestions?

Windows for business | Windows Client for IT Pros | Devices and deployment | Set up, install, or upgrade
Microsoft Security | Intune | Configuration Manager | Deployment
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

Accepted answer
  1. AllenLiu-MSFT 49,316 Reputation points Microsoft External Staff
    2023-09-06T02:33:56.0466667+00:00

    Hi, @~OSD~

    Thanks very much for your feedback. We're glad that the problem is solved now. Here's a short summary for the problem, we believe this will help other users to search for useful information more quickly.

    Problem/Symptom:

    Using DISM /Mount-Image to mount image captured on a Lenovo Laptop and was "generalized" with "Sysprep", failed with:

    Error: 1299

    Indicates a particular Security ID may not be assigned as the label of an object.

    Solution/Workaround:

    Starting over the image creation process, capture new image and service was successful.


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click ""Add Comment".

    1 person found this answer helpful.
    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. subbastion 5 Reputation points
    2023-10-20T15:15:44.8666667+00:00

    This error is caused by an invalid security descriptor in the directory of "Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache" . This issue is fixed by either

    Method 1: Use WinPE to Reset Attributes & Re-Capture

    • Plugin an External HDD/SDD & Plugin a USB Flash Drive with Windows Media Installation (WinPE)
    • Boot into winpe on a usb and then SHIFT+F10
    • xcopy "<WindowsDrive>:Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache" "<WindowsDrive>:Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache2" /S /E /I /G /H /R /B /Y /F
    • xcopy "<WindowsDrive>:Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache" "<WindowsDrive>:Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache2" /S /E /I /G /H /R /B /Y /F
    • xcopy "<WindowsDrive>:Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache2" "<WindowsDrive>:Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache" /S /E /I /G /H /R /B /Y /F
    • dism /capture-image /imagefile:"<ExteranalHDD/SSD>:\path\to\file.wim" /name:"NEW CAPTURE NAME" /capturedir:<WindowsDrive>:

    Method 2: Use 7-ZIP

    • Download and install 7-ZIP
    • Right click on the WIM File --> 7-Zip --> Open Archive
    • Extract the directory of "Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache" to a safe location
    • Delete the directory inside the WIM image "Windows\System32\config\systemprofile\AppData\Local\AMD\DxcCache"
    • Copy the Extracted directory back into the WIM image
    • if for some reason the attributes are retained before extracting back into the WIM image please run xcopy "<extracted dir>" "<extracted dir2>" /S /E /I /G /H /R /B /Y /F & xcopy "<extracted dir2>" "<extracted dir>" /S /E /I /G /H /R /B /Y /F
    1 person found this answer helpful.

  2. AllenLiu-MSFT 49,316 Reputation points Microsoft External Staff
    2023-09-04T05:58:28.5866667+00:00

    Hi, @~OSD~

    Thank you for posting in Microsoft Q&A forum.

    The error "Error: 1299 Indicates a particular Security ID may not be assigned as the label of an object" occurs when the DISM /Mount-Image command is unable to mount the image. This error is caused by a failure to restore the security descriptor of a file.

    One possible workaround is to try running the command as an administrator. Another possible workaround is to try copying the WIM file to a local drive and then running the command. Additionally, it is recommended to ensure that the WIM file is not corrupted.


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.