STATUS_INVALID_SID (0xC0000078) – Fix Corrupt Security Identifiers on Windows

Quick Answer

Delete the corrupted SID from the SECURITY registry hive under Policy\SeSecurityPrivilege, then run chkdsk /f and a system file check. Reboot.

What’s Actually Happening?

If you’re seeing STATUS_INVALID_SID (0xC0000078), Windows hit a security identifier that looks like garbage—maybe a byte got flipped, a registry write failed mid-save, or a drive error scrambled the SID data. I’ve seen this most often after a blue screen during a Windows update install (the notorious 0xC0000078 + 0x80070570 combo) or after restoring from a flaky backup. The system won’t let you proceed because it can’t trust the SID, so it throws the error and stops.

Fix Steps

1. Back up the registry first. Seriously, this step can wreck your install if you delete the wrong thing. Open regedit, go to HKEY_LOCAL_MACHINE\SECURITY, right-click the key, and export it. Save the .reg file somewhere safe.
2. Navigate to the corrupted SID. In regedit, expand HKEY_LOCAL_MACHINE\SECURITY\Policy\SeSecurityPrivilege. You’ll see a subkey named like S-1-5-...-...-...-.... If there’s anything that doesn’t look like a proper SID (e.g., it’s all zeros, has garbage characters, or the value is empty), that’s your culprit.
3. Delete that subkey. Right-click it and choose Delete. Confirm. This removes the corrupted SID entry, and Windows will regenerate it on next boot.
4. Run a disk check. Open an admin Command Prompt (right-click Start > Windows Terminal (Admin)) and type:
   chkdsk C: /f
   Say Y to schedule it, then restart. The check will fix any underlying filesystem corruption that might have caused the SID to go bad.
5. System File Checker. After the reboot, run sfc /scannow in the same admin prompt. Let it finish. If it finds corruption, reboot again.
6. Reboot and test. If the error is gone, great. If not, move to the alternative fixes below.

Alternative Fixes

• Create a new user profile. Sometimes the corrupted SID is tied to a specific user account. Log in as Administrator, go to Settings > Accounts > Family & other users, and create a new local user. Try logging in with that new account. If it works, migrate your files from the old user folder.
• Use a system restore point. If the error started after a recent change, roll back to a restore point before the problem. Type rstrui in the Run box (Win+R) and follow the wizard.
• Fix the SID list manually. If you’re comfortable with the command line, download the PsGetsid tool from Sysinternals. Run psgetsid.exe to list all SIDs on the machine. If you spot one that’s clearly malformed (starts with weird characters or is way too long), you can remove it via the registry as above, but double-check the key path.

Prevention Tip

This error almost always traces back to a sudden power loss or crash during a registry write. Invest in a UPS if you’re on a desktop, and set Windows Update to defer feature updates for a week—let other people find the bugs first. Also, avoid restoring the SECURITY hive from a backup unless you’re absolutely certain it’s good. One bad byte in that hive and you’ll see 0xC0000078 again.