How to fix Error 1335 on Windows 11

by

Troubleshooting Guide: Error 1335 – “The Subauthority Part of a Security ID Is Invalid”

Why This Error Happens

This error typically occurs when a Security Identifier (SID) becomes corrupted or malformed within a file, registry entry, or installation package, often due to disk corruption or improper data handling. It frequently appears during software installations (via Windows Installer/MSI) when the installer attempts to validate user or group permissions against a damaged SID structure. In some cases, this is triggered by a corrupted .cab file, a damaged installation source, or inconsistencies in the Security Account Manager (SAM) database.

Step-by-Step Resolution Guide

Step 1: Run System File Checker and DISM Scans

  • Open Command Prompt as Administrator (right-click Start > Terminal (Admin)).
  • Run sfc /scannow to repair corrupted system files that may hold invalid SID data.
  • Follow up with DISM /Online /Cleanup-Image /RestoreHealth to repair the underlying Windows image.
  • Restart your PC once both scans complete successfully.

Step 2: Verify and Repair the Installation Source

  • If the error occurs during a software install, delete any temporary installer cache files located in C:\Windows\Installer (back up first, as this folder is sensitive).
  • Re-download the installer package from the official vendor source to rule out a corrupted .msi or .cab file.
  • Right-click the installer file and select Properties > Digital Signatures to confirm the file hasn’t been tampered with or partially downloaded.

Step 3: Check Disk Integrity for Corruption

  • Run chkdsk C: /f /r from an elevated Command Prompt to scan for and repair bad sectors that may be corrupting SID-related registry hives.
  • Schedule the scan on next restart if prompted, since the C: drive is in use.
  • Allow the full scan to complete, as this may take significant time depending on drive size.

Step 4: Reset Local Security Permissions

  • Navigate to Control Panel > User Accounts > Manage User Accounts to check for orphaned or duplicate user profiles with broken SIDs.
  • Use whoami /user in Command Prompt to confirm your current account’s SID is properly formatted (it should follow the pattern S-1-5-21-...).
  • If a specific user profile is flagged as corrupted, create a new local administrator account via Settings > Accounts > Other users and migrate data manually.

Alternative or Verification Steps

  • After completing the steps above, retry the original action (installation, application launch, etc.) and confirm Error 1335 no longer appears in Event Viewer under Windows Logs > Application.
  • If the issue persists, boot into Safe Mode (Shift + Restart) and attempt the installation again, as third-party security software or drivers may be interfering with SID validation.