Troubleshooting FIM 2010 Error 1920: FIMPasswordReset failed to start

Troubleshooting FIM 2010 Error 1920: FIMPasswordReset failed to start

Error Message

Error 1920. Service 'Forefront Identity Manager Password Reset Client Service' (FIMPasswordReset) failed to start. Verify that you have sufficient privileges to start system services.

Symptoms

Execute the install up until you receive the error message.

Do a Process Monitor Log capture when attempting to start the Password Reset Service.

Review the Process Monitor Log for "Access Denied" messages

Check for an "Access Denied" message for the machine.config file

  

Navigated in Windows Explorer for the machine.config file and discovered that the machine.config file had a golden padlock on the icon.

  

Review the security tab, and check the accounts listed.
IF you see only the Administrators Group, and the System account listed, change the config.

The cause of the issue is the Network Service account needing access to this file.

RESOLUTION

Simply add the NETWORK SERVICE account to the machine.config files Security and give it Full Control.

  1. Right-click the machine.config file.
  2. Select Properties and then Security.
  3. Click Edit, and then click the Add button.
  4. Click OK and OK again.
  5. Execute the installation.
Leave a Comment
  • Please add 3 and 7 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Comments
  • Peter Geelen - MSFT edited Revision 8. Comment: Removed PII  

  • Ed Price - MSFT edited Revision 1. Comment: Title and cleaning up bullet issues at the bottom.

Page 1 of 1 (2 items)
Wikis - Comment List
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Peter Geelen - MSFT edited Revision 8. Comment: Removed PII  

  • Ed Price - MSFT edited Revision 1. Comment: Title and cleaning up bullet issues at the bottom.

Page 1 of 1 (2 items)