An Error Has Been Signaled By The Protected Object Server File Synsoacc.dll | DIRECT – TIPS |

icacls C:\Windows\System32\synsoacc.dll /reset Temporarily uninstall any non-Microsoft antivirus or EDR software. Reboot into Safe Mode with Networking . If the error disappears in Safe Mode, the culprit is a third-party filter driver or security hook. Reinstall the security software but add an exclusion for C:\Windows\System32\synsoacc.dll and lsass.exe .

klist purge Reboot and attempt to re-authenticate. icacls C:\Windows\System32\synsoacc

DISM /Online /Cleanup-Image /RestoreHealth After DISM completes, reboot and run SFC again. Reinstall the security software but add an exclusion

Open Regedit and navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters Ensure the Allowed Protection Levels value is not set to an invalid state. Then, download Process Monitor from Microsoft Sysinternals. Filter on Process Name containing lsass.exe and Path containing synsoacc.dll . Look for “ACCESS DENIED” results. Restore default permissions if necessary using icalcs : reboot and run SFC again.

Run the System File Checker from an elevated command prompt:

Run the following from an admin command prompt:

sfc /scannow This will replace any corrupted versions of synsoacc.dll from the cached WinSxS folder. If SFC reports corruption but cannot fix it, proceed to: