Event ID 1202 0x4b8 and event ID 1000 0xc0000409 errors in Windows Server 2008 SP2


When you apply the Obtain an impersonation token for another user in the same session (SeDelegateSessionUserImpersonatePrivilege) privilege from the Windows Server 2016 or Windows 10 1607 client to the Windows Server 2008 Service Pack 2 (SP2), you may experience the following issues:

SceCli event ID 1202 with error "0x4b8"

Event ID 1000 with the faulting module name "scesrv.dll" and the exception code "0xc0000409"

Moreover, the services.exe process stops working and the computer enters a restart loop.

Note This privilege is first introduced in Windows Server 2016.

How to get this update

Method 1: Windows Update

This update is provided as an Optional update on Windows Update. For more information about how to run Windows Update, see How to get an update through Windows Update.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

More information


To install this update, you must have Windows Server 2008 SP2 installed.

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology that Microsoft uses to describe software updates.

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.